last executing test programs: 6m57.438733974s ago: executing program 0 (id=1): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m56.99556665s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6m56.802588593s ago: executing program 0 (id=14): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 6m56.483963375s ago: executing program 0 (id=17): openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 6m56.32054959s ago: executing program 32 (id=17): openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 17.557629305s ago: executing program 5 (id=3225): mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') 15.355986513s ago: executing program 5 (id=3231): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) futex(&(0x7f00000000c0)=0x1, 0xd, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160a62) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x19) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x17}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1ae8, 0x0, 0x2, 0x151}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r6, r11, &(0x7f0000000080)={0x0, 0xb9cb, 0x2, 0x1, 0x147, 0x0, r6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c51, 0x4, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ace, 0x40, 0x2, 0x56}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9dc8, 0xa81a, 0x2, 0x1e2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d89, 0x400, 0x1, 0x1b0}}], 0x4, &(0x7f00000017c0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x16b, 0x0, 0x0}}, &(0x7f0000001840)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, 0x0) 10.891356908s ago: executing program 5 (id=3241): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x1, 0x2000000000000, 0xfffffffffffffffa, 0x2}, 0x0, 0x0, 0x1, 0x0, 0xee4de5c500f9dfe9}, {{@in=@multicast1, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.814911261s ago: executing program 3 (id=3242): socket$inet6(0xa, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x8, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0204", 0x2, 0x800, 0x0, 0x0) 9.767952041s ago: executing program 5 (id=3245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 9.115734215s ago: executing program 3 (id=3246): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@loopback, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) 7.329503887s ago: executing program 3 (id=3251): socket$netlink(0x10, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x5020011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 6.019000178s ago: executing program 3 (id=3259): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioperm(0x3, 0x9, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unlink(&(0x7f0000000180)='./file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.65613845s ago: executing program 1 (id=3262): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7, @ANYBLOB="13aef6a411f6b42e"], 0x20}}, 0x0) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="fc06ce86768bb07088affbb312efc1c00217ae1549f6a324449486548f5a7fef4103afe8eff82e0f598b34c1edcbe679e619cece63d887be3bc7a62b5aad324b14311c5c15d0241bd9967811a8d4fbd2364affcef4779fadaf73e6265107d3c846aeaf8d4aaac4933e0222772dd4666af4782b02d7cd2c6262f656355d8a9c4138bce05315da046427aa31e5784a2e5e16437a9013f4b3ffe71201a34c566f487636f521eadc221e65bc555652279e2e96c33b2f2c708860488bd7de", @ANYRES64=r6, @ANYRES8, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYRESDEC], 0xbb) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x41c}}}, 0x7) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0x8000000000000001) 4.625233453s ago: executing program 4 (id=3263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendfile(r4, r1, 0x0, 0x1000009) 4.594559238s ago: executing program 2 (id=3264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r3, 0x0, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) 4.31190699s ago: executing program 4 (id=3265): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x6}, 0x1c) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d1) 3.950220605s ago: executing program 4 (id=3266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.910933467s ago: executing program 5 (id=3267): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 3.772284118s ago: executing program 1 (id=3268): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.745697449s ago: executing program 3 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff000705810200020007050202000200070583"], 0x0) 3.599124925s ago: executing program 2 (id=3270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x37}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000002, 0x1) fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x390, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x188, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, 0x0, &(0x7f00000000c0)) 3.597459846s ago: executing program 4 (id=3271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000000)="de21cff472aa580c2ee9", 0xa}, {&(0x7f00000014c0)="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", 0xdeb}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.024788867s ago: executing program 1 (id=3272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x44, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x2, 0x0, {0x2, 0x111b, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x4, 0x1}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.870992677s ago: executing program 2 (id=3273): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) fchdir(r0) close(r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0x3, 0x6, {{0xf, 0x4, 0x3, 0x5, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x3, '('}, @timestamp={0x44, 0x20, 0xed, 0x0, 0x7, [0x3, 0x4cb, 0x2, 0x7, 0x8, 0x12, 0x6]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x51, 0x3bb, 0x5c, @private0, @remote, 0x1, 0x8000, 0x0, 0xd}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0xc8}}, 0x1) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000, {r0}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) 2.858315413s ago: executing program 5 (id=3274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 2.847918504s ago: executing program 1 (id=3275): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 2.20162918s ago: executing program 2 (id=3276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket$packet(0x11, 0x3, 0x300) gettid() socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 1.841770106s ago: executing program 4 (id=3277): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd27, 0xfffffffe, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1.83107314s ago: executing program 3 (id=3278): semop(0x0, &(0x7f0000000200), 0x53) unshare(0x4020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc9, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x0, 0x1}, {0x18, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x810) unshare(0x2c020400) 1.603565504s ago: executing program 1 (id=3279): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x101c02) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) openat$kvm(0xffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa0) 1.600457343s ago: executing program 2 (id=3280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xa, 0x0, &(0x7f00000003c0)="63eced8e46dc3f2ddf33", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x50) 851.902137ms ago: executing program 1 (id=3281): keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) sendfile(r4, r4, &(0x7f00000000c0)=0x7, 0x6fecb1) 623.944349ms ago: executing program 4 (id=3282): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x60, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 0s ago: executing program 2 (id=3283): io_uring_setup(0x7f69, &(0x7f0000000000)={0x0, 0x23e3, 0x0, 0x3, 0x2a2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000002c0)={0xfffffffd, 0x100005fb, 0x36d2, 0xd, 0x6, "94b994e0991636c8158e5114ca81bf00", 0xabd1679, 0x3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/fib_triestat\x00') r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x36, '\x00', @st={0x4, [{0x0, @uvalue=0x9}, {0x0, @svalue=0xd}, {0x2, @svalue=0x10000}, {0x3, @svalue=0x8000000000000001}]}, 0x1c}]}) kernel console output (not intermixed with test programs): =system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.616849][ T7499] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 303.864442][ T30] audit: type=1400 audit(1786160541.374:2285): avc: denied { execmem } for pid=12970 comm="syz.4.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 303.884454][ T7499] usb 2-1: Using ep0 maxpacket: 8 [ 303.889808][ T30] audit: type=1400 audit(1786160541.494:2286): avc: denied { create } for pid=12972 comm="syz.2.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 303.912816][ T7499] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 303.914052][T12973] netlink: 'syz.2.2433': attribute type 16 has an invalid length. [ 303.923124][ T7499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.938593][T12973] netlink: 'syz.2.2433': attribute type 17 has an invalid length. [ 304.159393][ T30] audit: type=1400 audit(1786160541.674:2287): avc: denied { map_create } for pid=12970 comm="syz.4.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.272418][ T7499] usb 2-1: config 0 descriptor?? [ 304.453989][ T30] audit: type=1400 audit(1786160541.674:2288): avc: denied { bpf } for pid=12970 comm="syz.4.2432" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 304.492383][ T7499] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 304.502761][ T30] audit: type=1400 audit(1786160541.674:2289): avc: denied { map_read map_write } for pid=12970 comm="syz.4.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.530633][ T30] audit: type=1400 audit(1786160541.994:2290): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.538371][ T7499] usb 2-1: Detected SIO [ 304.582434][ T30] audit: type=1400 audit(1786160542.014:2291): avc: denied { open } for pid=5833 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.683890][ T7499] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 304.804416][ T7499] usb 2-1: USB disconnect, device number 23 [ 304.823657][ T7499] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 304.852554][ T7499] ftdi_sio 2-1:0.0: device disconnected [ 305.391436][T12997] fuse: fd is not a fuse device [ 305.606764][T13002] random: crng reseeded on system resumption [ 306.135875][T13014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.206367][T13014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.249403][T13014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.317655][T13014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.387313][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.399577][ T7142] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.409516][ T7142] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.418736][ T7142] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.509119][ T57] net_ratelimit: 63 callbacks suppressed [ 306.509138][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.565377][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.727918][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.738386][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.815682][T13023] fuse: fd is not a fuse device [ 306.867254][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.886761][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.008403][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.026176][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.147286][ T7142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.157001][ T7142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.220639][T13040] fuse: fd is not a fuse device [ 307.467200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 307.557244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 307.664492][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 307.720190][T13052] hsr_slave_0 (unregistering): left promiscuous mode [ 308.463403][T13063] lo speed is unknown, defaulting to 1000 [ 308.568024][T13063] lo speed is unknown, defaulting to 1000 [ 308.835165][T13068] ceph: No mds server is up or the cluster is laggy [ 309.022441][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 309.022456][ T30] audit: type=1400 audit(1786160546.672:2363): avc: denied { listen } for pid=13079 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.055496][ T30] audit: type=1400 audit(1786160546.702:2364): avc: denied { accept } for pid=13079 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.206672][T13085] fuse: fd is not a fuse device [ 309.208344][ T30] audit: type=1400 audit(1786160546.862:2365): avc: denied { mounton } for pid=13084 comm="syz.2.2473" path="/447/file0" dev="tmpfs" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 309.228842][T13083] lo speed is unknown, defaulting to 1000 [ 309.276579][T13083] lo speed is unknown, defaulting to 1000 [ 309.302185][ T30] audit: type=1400 audit(1786160546.902:2366): avc: denied { mmap_zero } for pid=13086 comm="syz.3.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 309.358711][ T30] audit: type=1400 audit(1786160546.911:2367): avc: denied { map } for pid=13086 comm="syz.3.2474" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 309.413590][ T30] audit: type=1400 audit(1786160546.911:2368): avc: denied { read write } for pid=13086 comm="syz.3.2474" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 309.441977][ T30] audit: type=1400 audit(1786160546.921:2369): avc: denied { map } for pid=13086 comm="syz.3.2474" path="socket:[47915]" dev="sockfs" ino=47915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 309.503470][ T30] audit: type=1400 audit(1786160547.131:2370): avc: denied { sqpoll } for pid=13077 comm="syz.5.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 309.610988][T13092] bond7: entered allmulticast mode [ 309.659540][ T30] audit: type=1400 audit(1786160547.311:2371): avc: denied { create } for pid=13102 comm="syz.3.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 309.754473][ T30] audit: type=1400 audit(1786160547.401:2372): avc: denied { bind } for pid=13102 comm="syz.3.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.322121][T13116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13116 comm=syz.2.2482 [ 310.406835][T13116] netlink: 'syz.2.2482': attribute type 3 has an invalid length. [ 310.443628][T13116] netlink: 'syz.2.2482': attribute type 3 has an invalid length. [ 311.222228][T13149] tunl0: Caught tx_queue_len zero misconfig [ 311.307079][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2492'. [ 311.357182][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2492'. [ 311.742893][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.749875][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.766595][ T57] net_ratelimit: 94 callbacks suppressed [ 311.766610][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 311.786689][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 311.879553][ T7499] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 311.911759][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 311.920354][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.014220][T13165] overlayfs: failed to clone upperpath [ 312.029710][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.042278][ T7499] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.055325][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.070587][ T7499] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.097049][ T7499] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 312.119694][ T7499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.133665][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2498'. [ 312.146751][ T7499] usb 6-1: config 0 descriptor?? [ 312.227094][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.259828][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.317868][T13169] binder_alloc: 13168: pid 13168 spamming oneway? 1 buffers allocated for a total size of 4096 [ 312.343060][T13169] binder_alloc: 13168: pid 13168 spamming oneway? 2 buffers allocated for a total size of 5120 [ 312.379816][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.388755][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.777518][T13182] overlayfs: failed to clone lowerpath [ 312.835659][T13183] Invalid source name [ 314.115970][T13202] syz_tun (unregistering): left allmulticast mode [ 314.173388][T13202] syz_tun (unregistering): left promiscuous mode [ 314.205701][T13202] bridge0: port 1(syz_tun) entered disabled state [ 314.291484][T13200] lo speed is unknown, defaulting to 1000 [ 314.395684][T13200] lo speed is unknown, defaulting to 1000 [ 314.458742][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 314.458759][ T30] audit: type=1400 audit(1786160552.109:2395): avc: denied { execute } for pid=13207 comm="syz.2.2511" name="file0" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.516615][ T7498] usb 6-1: USB disconnect, device number 18 [ 315.087870][ T30] audit: type=1400 audit(1786160552.729:2396): avc: denied { mount } for pid=13216 comm="syz.3.2514" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 315.301320][ T30] audit: type=1400 audit(1786160552.938:2397): avc: denied { create } for pid=13219 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.382303][ T30] audit: type=1400 audit(1786160552.988:2398): avc: denied { connect } for pid=13219 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.430068][ T30] audit: type=1400 audit(1786160552.988:2399): avc: denied { bind } for pid=13219 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.601702][ T30] audit: type=1400 audit(1786160553.018:2400): avc: denied { write } for pid=13219 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.776300][ T30] audit: type=1400 audit(1786160553.018:2401): avc: denied { read } for pid=13219 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.994390][ T30] audit: type=1400 audit(1786160553.648:2402): avc: denied { create } for pid=13228 comm="syz.3.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.063310][ T30] audit: type=1400 audit(1786160553.718:2403): avc: denied { cmd } for pid=13230 comm="iou-wrk-13231" path="socket:[48923]" dev="sockfs" ino=48923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 316.779194][ T30] audit: type=1400 audit(1786160554.428:2404): avc: denied { write } for pid=13237 comm="syz.5.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.852280][ T36] net_ratelimit: 96 callbacks suppressed [ 316.852297][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 316.946668][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.011785][T13242] fuse: fd is not a fuse device [ 317.042766][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2522'. [ 317.102224][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.124300][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.282261][ T7144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.299318][ T7144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.442711][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.473477][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.602620][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.628404][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.783478][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.090128][T13264] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.133777][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.201499][T13265] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.336595][T13266] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.534000][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.564194][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.597210][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.633982][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.677533][T13259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 319.237250][T13272] lo speed is unknown, defaulting to 1000 [ 319.289278][T13272] lo speed is unknown, defaulting to 1000 [ 319.636357][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 319.636373][ T30] audit: type=1400 audit(1786160557.286:2415): avc: denied { setopt } for pid=13280 comm="syz.5.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.964910][ T30] audit: type=1400 audit(1786160557.316:2416): avc: denied { read write } for pid=13280 comm="syz.5.2536" name="video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.052732][ T30] audit: type=1400 audit(1786160557.316:2417): avc: denied { open } for pid=13280 comm="syz.5.2536" path="/dev/video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.102431][ T30] audit: type=1400 audit(1786160557.326:2418): avc: denied { ioctl } for pid=13280 comm="syz.5.2536" path="/dev/video4" dev="devtmpfs" ino=935 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.346839][ T30] audit: type=1400 audit(1786160557.376:2419): avc: denied { map } for pid=13280 comm="syz.5.2536" path="/dev/video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.731934][ T30] audit: type=1400 audit(1786160558.376:2420): avc: denied { write } for pid=13301 comm="syz.3.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.800483][ T30] audit: type=1400 audit(1786160558.376:2421): avc: denied { nlmsg_write } for pid=13301 comm="syz.3.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.075199][T13313] jffs2: notice: (13313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 321.140499][ T30] audit: type=1400 audit(1786160558.786:2422): avc: denied { mount } for pid=13312 comm="syz.3.2546" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 321.934824][ T7140] net_ratelimit: 85 callbacks suppressed [ 321.934845][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 321.976711][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 322.074949][ T30] audit: type=1400 audit(1786160559.715:2423): avc: denied { write } for pid=13336 comm="syz.5.2551" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 322.117324][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 322.117369][T11047] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 322.183866][ T30] audit: type=1400 audit(1786160559.715:2424): avc: denied { open } for pid=13336 comm="syz.5.2551" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 322.225479][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 322.251609][ T7132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 322.355096][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 322.566910][T11047] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 322.735169][T11051] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 322.837209][T11051] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 323.687964][T13376] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 325.767032][ T7480] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 325.938244][ T7480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.956558][ T7480] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 325.977760][ T7480] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.996409][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 325.996426][ T30] audit: type=1400 audit(1786160563.633:2428): avc: denied { name_connect } for pid=13406 comm="syz.5.2567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 326.005695][ T7480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.053222][ T7480] usb 2-1: Product: syz [ 326.063040][ T7480] usb 2-1: Manufacturer: syz [ 326.070932][ T7480] usb 2-1: SerialNumber: syz [ 326.088919][ T30] audit: type=1400 audit(1786160563.683:2429): avc: denied { accept } for pid=13406 comm="syz.5.2567" lport=46929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.091029][ T7480] cdc_mbim 2-1:1.0: skipping garbage [ 326.433314][T13421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 326.941249][ T30] audit: type=1400 audit(1786160564.583:2430): avc: denied { setopt } for pid=13423 comm="syz.3.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.978747][ T30] audit: type=1400 audit(1786160564.613:2431): avc: denied { write } for pid=13423 comm="syz.3.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 327.029982][ T7137] net_ratelimit: 66 callbacks suppressed [ 327.030035][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.066505][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.208991][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.228031][T13431] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 327.237243][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.264764][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.303380][T13431] xfrm0: entered promiscuous mode [ 327.327549][T13431] team0: Device xfrm0 is of different type [ 327.369054][T13435] tipc: Enabled bearer , priority 0 [ 327.378616][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.386524][T13421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 327.396844][ T7480] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 327.438115][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.439801][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'. [ 327.473120][ T30] audit: type=1400 audit(1786160565.112:2432): avc: denied { bind } for pid=13427 comm="syz.2.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 327.502334][ T7480] wwan wwan0: port wwan0mbim0 attached [ 327.508035][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 327.552404][ T7480] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b6:86:f1:1e:be:bf [ 327.638171][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.710541][ T30] audit: type=1400 audit(1786160565.352:2433): avc: denied { read } for pid=5257 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 327.776202][ T30] audit: type=1400 audit(1786160565.402:2434): avc: denied { search } for pid=5257 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.852745][ T30] audit: type=1400 audit(1786160565.402:2435): avc: denied { search } for pid=5257 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.944412][ T7496] usb 2-1: USB disconnect, device number 24 [ 327.955222][ T7496] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 327.998303][ T30] audit: type=1400 audit(1786160565.402:2436): avc: denied { search } for pid=5257 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.176892][ T7496] wwan wwan0: port wwan0mbim0 disconnected [ 328.224963][ T30] audit: type=1400 audit(1786160565.402:2437): avc: denied { read } for pid=5257 comm="dhcpcd" name="n46" dev="tmpfs" ino=6492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.212167][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2578'. [ 329.314452][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 329.880237][T13466] fuse: Bad value for 'fd' [ 329.910797][T13466] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2581'. [ 330.184539][T13460] bond0: (slave bond_slave_0): Releasing backup interface [ 330.215222][T13460] bond_slave_0: left promiscuous mode [ 330.235131][T13472] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 330.293452][T13460] bond_slave_0: entered promiscuous mode [ 330.310685][T13460] bond_slave_0: entered allmulticast mode [ 330.581327][T13488] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 330.611439][T13488] netlink: 'syz.4.2586': attribute type 4 has an invalid length. [ 330.649591][T13494] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 330.651256][T13488] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2586'. [ 330.691154][T13494] netlink: 'syz.4.2586': attribute type 4 has an invalid length. [ 330.769469][T13494] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2586'. [ 331.070892][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 331.070909][ T30] audit: type=1400 audit(1786160568.701:2465): avc: denied { ioctl } for pid=13485 comm="syz.4.2586" path="socket:[49378]" dev="sockfs" ino=49378 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.439396][ T30] audit: type=1400 audit(1786160569.070:2466): avc: denied { write } for pid=13492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.658753][ T30] audit: type=1400 audit(1786160569.260:2467): avc: denied { map } for pid=13511 comm="syz.4.2592" path="socket:[50279]" dev="sockfs" ino=50279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.717516][T13517] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2593'. [ 331.831656][ T30] audit: type=1400 audit(1786160569.260:2468): avc: denied { read } for pid=13511 comm="syz.4.2592" path="socket:[50279]" dev="sockfs" ino=50279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.889416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 332.049860][ T83] net_ratelimit: 96 callbacks suppressed [ 332.049876][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.066231][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.106112][ T30] audit: type=1400 audit(1786160569.330:2469): avc: denied { write } for pid=13516 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.312147][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.555424][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.603880][ T30] audit: type=1400 audit(1786160569.510:2470): avc: denied { nlmsg_read } for pid=13515 comm="syz.5.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 332.680521][T11051] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.717649][T11051] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 332.850065][T11051] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.974663][T11051] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 333.101703][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 333.662708][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 334.098691][T13562] 9p: Bad value for 'wfdno' [ 334.202887][ T30] audit: type=1400 audit(1786160571.849:2471): avc: denied { write } for pid=13542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.329266][ T30] audit: type=1400 audit(1786160571.969:2472): avc: denied { create } for pid=13560 comm="syz.4.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.374905][ T30] audit: type=1400 audit(1786160571.969:2473): avc: denied { write } for pid=13566 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.148692][T13596] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2614'. [ 336.254077][ T30] audit: type=1400 audit(1786160573.888:2474): avc: denied { read write } for pid=13599 comm="syz.5.2616" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.312011][ T30] audit: type=1400 audit(1786160573.888:2475): avc: denied { open } for pid=13599 comm="syz.5.2616" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.415232][T13609] overlayfs: failed to clone upperpath [ 336.440064][ T30] audit: type=1400 audit(1786160574.078:2476): avc: denied { watch } for pid=13608 comm="syz.3.2620" path="/654/bus/file1" dev="tmpfs" ino=3453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 336.470265][ T30] audit: type=1400 audit(1786160574.078:2477): avc: denied { watch_sb watch_reads } for pid=13608 comm="syz.3.2620" path="/654/bus/file1" dev="tmpfs" ino=3453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 336.624816][ T30] audit: type=1400 audit(1786160574.238:2478): avc: denied { mounton } for pid=13601 comm="syz.1.2619" path="/proc/1133/task" dev="proc" ino=49510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 337.266487][ T83] net_ratelimit: 42 callbacks suppressed [ 337.266506][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.280552][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 337.410578][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.449709][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 337.582220][ T30] audit: type=1400 audit(1786160575.217:2479): avc: denied { mount } for pid=13624 comm="syz.4.2625" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 337.583548][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.679131][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 337.813133][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.921606][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 338.082861][ T30] audit: type=1326 audit(1786160575.727:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.3.2629" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 338.112692][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 338.180299][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 338.183659][ T30] audit: type=1326 audit(1786160575.747:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.3.2629" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 338.323056][ T30] audit: type=1326 audit(1786160575.747:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.3.2629" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 338.417089][ T30] audit: type=1326 audit(1786160575.747:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.3.2629" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 338.437206][T13643] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 338.472730][T13643] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 338.478257][T13645] netlink: 'syz.4.2632': attribute type 3 has an invalid length. [ 338.547977][T13643] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 338.576162][T13643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 339.511685][T13667] jffs2: notice: (13667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 339.690692][T13672] overlayfs: overlapping lowerdir path [ 339.815475][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 340.501317][T13692] fuse: fd is not a fuse device [ 341.220360][T13705] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2650'. [ 341.288326][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 341.288342][ T30] audit: type=1400 audit(1786160578.925:2602): avc: denied { ioctl } for pid=13701 comm="syz.4.2650" path="socket:[49626]" dev="sockfs" ino=49626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.488794][ T30] audit: type=1400 audit(1786160579.125:2603): avc: denied { bind } for pid=13708 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.822748][T13727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.831629][T13727] IPv6: NLM_F_CREATE should be set when creating new route [ 341.838864][T13727] IPv6: NLM_F_CREATE should be set when creating new route [ 341.846056][T13727] IPv6: NLM_F_CREATE should be set when creating new route [ 342.244186][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'. [ 342.337458][ T7137] net_ratelimit: 68 callbacks suppressed [ 342.337476][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.368471][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.484821][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.494807][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 342.504114][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.589210][T13739] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2663'. [ 342.624931][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.642813][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.765011][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.794943][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.813176][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 342.854467][ T30] audit: type=1400 audit(1786160580.485:2604): avc: denied { bind } for pid=13741 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.878392][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 342.919579][ T30] audit: type=1400 audit(1786160580.515:2605): avc: denied { node_bind } for pid=13741 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 342.945360][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.984148][ T30] audit: type=1400 audit(1786160580.515:2606): avc: denied { connect } for pid=13741 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.042669][ T30] audit: type=1400 audit(1786160580.515:2607): avc: denied { write } for pid=13741 comm="syz.2.2664" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.423264][ T30] audit: type=1400 audit(1786160581.054:2608): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 343.895408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 344.021161][ T30] audit: type=1326 audit(1786160581.654:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13755 comm="syz.3.2668" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 344.133112][ T30] audit: type=1326 audit(1786160581.654:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13755 comm="syz.3.2668" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 344.231533][ T30] audit: type=1326 audit(1786160581.654:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13755 comm="syz.3.2668" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526db9e0d9 code=0x7ffc0000 [ 344.553289][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 344.628375][T13762] can0: slcan on ttyS3. [ 344.707667][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.742673][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.747403][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 344.758814][T13770] futex_wake_op: syz.3.2670 tries to shift op by 144; fix this program [ 344.828296][ T83] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.872452][ T83] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.317147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 345.744111][T13760] can0 (unregistered): slcan off ttyS3. [ 345.970380][T13790] netlink: 'syz.3.2673': attribute type 3 has an invalid length. [ 346.036743][T13790] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2673'. [ 346.566389][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 346.566400][ T30] audit: type=1400 audit(1786160584.193:2698): avc: denied { write } for pid=13787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.844815][ T30] audit: type=1400 audit(1786160584.473:2699): avc: denied { write } for pid=13814 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.314828][T13823] cifs: Unknown parameter 'timeo' [ 347.357269][T11044] net_ratelimit: 101 callbacks suppressed [ 347.357284][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 347.416237][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.567395][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 347.582474][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.641682][T13829] jffs2: notice: (13829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 347.728676][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 347.759287][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.803405][ T30] audit: type=1400 audit(1786160585.432:2700): avc: denied { bind } for pid=13830 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.875445][ T30] audit: type=1400 audit(1786160585.462:2701): avc: denied { connect } for pid=13830 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.908661][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 347.934920][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 348.092534][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.102293][T13838] bridge0: port 3(vlan3) entered blocking state [ 348.120507][T13838] bridge0: port 3(vlan3) entered disabled state [ 348.128257][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.142683][T13838] vlan3: entered allmulticast mode [ 348.151105][T13838] geneve0: entered allmulticast mode [ 348.176286][T13838] vlan3: entered promiscuous mode [ 348.192983][T13838] geneve0: entered promiscuous mode [ 348.400586][T13847] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2687'. [ 348.440195][ T30] audit: type=1400 audit(1786160586.072:2702): avc: denied { name_bind 0x1000000 } for pid=13846 comm="syz.1.2687" path="socket:[49775]" dev="sockfs" ino=49775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.496764][ T30] audit: type=1400 audit(1786160586.122:2703): avc: denied { read } for pid=13846 comm="syz.1.2687" path="socket:[49774]" dev="sockfs" ino=49774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.999152][ T30] audit: type=1400 audit(1786160586.332:2704): avc: denied { getopt } for pid=13856 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.019358][ T30] audit: type=1400 audit(1786160586.422:2705): avc: denied { mount } for pid=13854 comm="syz.2.2690" name="/" dev="autofs" ino=50757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 349.573094][ T30] audit: type=1400 audit(1786160587.201:2706): avc: denied { getopt } for pid=13874 comm="syz.2.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.910357][ T30] audit: type=1400 audit(1786160587.541:2707): avc: denied { open } for pid=13885 comm="syz.1.2703" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 350.094568][T13893] overlayfs: failed to clone upperpath [ 352.194807][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 352.194824][ T30] audit: type=1400 audit(1786160589.820:2709): avc: denied { bind } for pid=13916 comm="syz.3.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 352.280504][ T30] audit: type=1400 audit(1786160589.910:2710): avc: denied { mount } for pid=13919 comm="syz.3.2712" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 352.374471][ T13] net_ratelimit: 72 callbacks suppressed [ 352.374490][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 352.399837][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 353.720158][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.831842][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 353.858519][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 353.897532][ T30] audit: type=1400 audit(1786160591.529:2711): avc: denied { create } for pid=13938 comm="syz.3.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.926154][T13939] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 353.960506][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.980192][T13939] team0: Cannot enslave team device to itself [ 354.008292][ T30] audit: type=1400 audit(1786160591.639:2712): avc: denied { getopt } for pid=13938 comm="syz.3.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.036231][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.071827][T13945] fuse: fd is not a fuse device [ 354.074387][ T7132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 354.233538][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.251245][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 354.346477][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 354.401007][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.620280][ T30] audit: type=1400 audit(1786160592.249:2713): avc: denied { read } for pid=13965 comm="syz.1.2722" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 354.728151][ T30] audit: type=1400 audit(1786160592.249:2714): avc: denied { open } for pid=13965 comm="syz.1.2722" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 354.845280][ T30] audit: type=1400 audit(1786160592.249:2715): avc: denied { ioctl } for pid=13965 comm="syz.1.2722" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 354.942236][ T30] audit: type=1400 audit(1786160592.459:2716): avc: denied { write } for pid=13969 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.010159][T13979] overlayfs: failed to clone upperpath [ 355.617577][T13984] lo speed is unknown, defaulting to 1000 [ 355.713487][T13984] lo speed is unknown, defaulting to 1000 [ 355.923922][ T30] audit: type=1400 audit(1786160593.558:2717): avc: denied { getopt } for pid=13988 comm="syz.1.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.208384][T13994] tipc: Enabled bearer , priority 0 [ 356.325037][ T30] audit: type=1400 audit(1786160593.958:2718): avc: denied { shutdown } for pid=13997 comm="syz.4.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.349701][T13998] UBIFS error (pid: 13998): cannot open "ubi0_0", error -19 [ 357.957899][ T7139] net_ratelimit: 49 callbacks suppressed [ 357.957921][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 357.998623][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.831591][T14018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.884514][ T7496] lo speed is unknown, defaulting to 1000 [ 358.904227][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.925914][ T7132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 359.053649][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.076733][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 359.215399][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.232738][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 359.363280][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.792458][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 359.792474][ T30] audit: type=1400 audit(1786160597.416:2720): avc: denied { mount } for pid=14041 comm="syz.2.2745" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 361.206890][ T30] audit: type=1400 audit(1786160598.836:2721): avc: denied { getopt } for pid=14068 comm="syz.5.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.227150][T14070] netlink: 'syz.5.2754': attribute type 1 has an invalid length. [ 361.361755][T14070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.392785][T14076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 361.440550][T14074] bond3: (slave geneve3): making interface the new active one [ 361.446204][ T30] audit: type=1400 audit(1786160599.075:2722): avc: denied { ioctl } for pid=14079 comm="syz.4.2757" path="socket:[50121]" dev="sockfs" ino=50121 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.473162][T14074] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 361.486198][T14076] ip6gre1: entered promiscuous mode [ 361.491467][T14076] ip6gre1: entered allmulticast mode [ 361.539777][T14076] netlink: 'syz.1.2756': attribute type 6 has an invalid length. [ 361.558842][T14084] futex_wake_op: syz.2.2758 tries to shift op by 144; fix this program [ 361.561992][T14076] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2756'. [ 361.567956][T14085] tipc: Failed to remove unknown binding: 66,0,0/2126:1244667895/1244667897 [ 361.611206][T14085] tipc: Failed to remove unknown binding: 66,0,0/2126:1244667895/1244667896 [ 361.648621][T14085] tipc: Failed to remove unknown binding: 66,0,0/2126:1244667895/1244667897 [ 361.662667][T14085] tipc: Failed to remove unknown binding: 66,0,0/2126:1244667895/1244667896 [ 361.754620][T14093] netlink: 'syz.1.2762': attribute type 12 has an invalid length. [ 362.609636][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 362.622668][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.622701][ T50] Tainted: [L]=SOFTLOCKUP [ 362.622707][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 362.622720][ T50] Workqueue: hci0 hci_rx_work [ 362.622745][ T50] Call Trace: [ 362.622752][ T50] [ 362.622759][ T50] dump_stack_lvl+0x100/0x190 [ 362.622784][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 362.622811][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 362.622831][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 362.622849][ T50] ? find_held_lock+0x2b/0x80 [ 362.622865][ T50] ? kobject_add_internal+0x25f/0x930 [ 362.622882][ T50] ? kobject_add_internal+0x25f/0x930 [ 362.622901][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 362.622927][ T50] kobject_add_internal+0x2c8/0x930 [ 362.622948][ T50] kobject_add+0x16a/0x1e0 [ 362.622964][ T50] ? __pfx_kobject_add+0x10/0x10 [ 362.622993][ T50] ? class_to_subsys+0x10f/0x150 [ 362.623026][ T50] ? kobject_put+0xb9/0x640 [ 362.623050][ T50] ? _raw_spin_unlock+0x28/0x50 [ 362.623077][ T50] device_add+0x294/0x1970 [ 362.623103][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 362.623124][ T50] ? __pfx_device_add+0x10/0x10 [ 362.623151][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 362.623187][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 362.623211][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 362.623239][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 362.623264][ T50] ? hci_event_packet+0x186/0xcd0 [ 362.623290][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 362.623312][ T50] ? skb_pull_data+0x15f/0x1e0 [ 362.623341][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 362.623363][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 362.623387][ T50] hci_event_packet+0x51c/0xcd0 [ 362.623408][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 362.623430][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 362.623459][ T50] ? kcov_remote_start+0x384/0x670 [ 362.623479][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 362.623506][ T50] hci_rx_work+0x451/0xfc0 [ 362.623531][ T50] process_one_work+0xa23/0x1940 [ 362.623564][ T50] ? __pfx_process_one_work+0x10/0x10 [ 362.623591][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 362.623614][ T50] worker_thread+0x5ef/0xe50 [ 362.623643][ T50] ? kthread+0x13a/0x450 [ 362.623660][ T50] ? __pfx_worker_thread+0x10/0x10 [ 362.623678][ T50] kthread+0x370/0x450 [ 362.623694][ T50] ? __pfx_kthread+0x10/0x10 [ 362.623713][ T50] ret_from_fork+0x72b/0xd50 [ 362.623738][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 362.623762][ T50] ? __switch_to+0x800/0x10f0 [ 362.623780][ T50] ? __pfx_kthread+0x10/0x10 [ 362.623799][ T50] ret_from_fork_asm+0x1a/0x30 [ 362.623838][ T50] [ 362.890211][ T50] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 362.904289][ T50] Bluetooth: hci0: failed to register connection device [ 362.999636][T11044] net_ratelimit: 59 callbacks suppressed [ 362.999655][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.013188][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.127113][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.167973][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.183193][ T30] audit: type=1400 audit(1786160600.805:2723): avc: denied { ioctl } for pid=14130 comm="syz.5.2772" path="socket:[51131]" dev="sockfs" ino=51131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.218951][ T30] audit: type=1400 audit(1786160600.805:2724): avc: denied { setopt } for pid=14130 comm="syz.5.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.329387][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.338059][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 363.455600][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.485318][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.502925][T14143] ve: renamed from veth0_vlan [ 363.515419][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.565431][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.744184][ T30] audit: type=1804 audit(1786160601.364:2725): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2779" name="/newroot/452/file0" dev="tmpfs" ino=2397 res=1 errno=0 [ 363.749571][T14152] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 363.827477][T14152] ref_ctr increment failed for inode: 0x95d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e244c80 [ 363.921713][T14158] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 363.962221][ T30] audit: type=1400 audit(1786160601.584:2726): avc: denied { read } for pid=14159 comm="syz.5.2781" path="socket:[51160]" dev="sockfs" ino=51160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.987370][T14158] ref_ctr decrement failed for inode: 0x95d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e244c80 [ 364.021008][T14158] uprobe: syz.1.2779:14158 failed to unregister, leaking uprobe [ 364.220878][T14168] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 365.231342][ T30] audit: type=1400 audit(1786160602.854:2727): avc: denied { write } for pid=14153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.493504][ T30] audit: type=1400 audit(1786160603.113:2728): avc: denied { write } for pid=14187 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.153992][ T5257] ve: left promiscuous mode [ 366.182710][ T7479] ve: entered promiscuous mode [ 366.248892][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2786'. [ 366.649003][ T30] audit: type=1400 audit(1786160604.263:2729): avc: denied { ioctl } for pid=14198 comm="syz.5.2790" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 367.331693][ T30] audit: type=1400 audit(1786160604.952:2730): avc: denied { write } for pid=14204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.513937][ T30] audit: type=1400 audit(1786160605.132:2731): avc: denied { ioctl } for pid=14219 comm="syz.4.2795" path="socket:[52244]" dev="sockfs" ino=52244 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 367.739931][ T30] audit: type=1400 audit(1786160605.252:2732): avc: denied { write } for pid=14226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.028202][T11044] net_ratelimit: 72 callbacks suppressed [ 368.028242][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.076778][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.252520][ T30] audit: type=1400 audit(1786160605.872:2733): avc: denied { read write } for pid=14236 comm="syz.5.2798" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 368.291700][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.308930][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.327577][ T30] audit: type=1400 audit(1786160605.902:2734): avc: denied { open } for pid=14236 comm="syz.5.2798" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 368.392988][ T30] audit: type=1400 audit(1786160605.902:2735): avc: denied { map } for pid=14236 comm="syz.5.2798" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 368.429254][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.447120][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.552035][T14251] tipc: Enabling of bearer rejected, failed to enable media [ 368.567850][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.597912][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.612748][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.738050][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.515239][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 369.755150][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 369.795109][T14281] Cannot find add_set index 0 as target [ 369.820740][ T30] audit: type=1400 audit(1786160607.441:2736): avc: denied { name_bind } for pid=14282 comm="syz.3.2814" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 370.345014][ T30] audit: type=1400 audit(1786160607.961:2737): avc: denied { bind } for pid=14289 comm="syz.3.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 370.406903][ T30] audit: type=1400 audit(1786160607.961:2738): avc: denied { name_bind } for pid=14289 comm="syz.3.2817" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 370.473811][ T30] audit: type=1400 audit(1786160607.961:2739): avc: denied { node_bind } for pid=14289 comm="syz.3.2817" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 370.557565][ T30] audit: type=1400 audit(1786160608.171:2740): avc: denied { ioctl } for pid=14294 comm="syz.3.2819" path="socket:[52332]" dev="sockfs" ino=52332 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.851570][T14299] lo speed is unknown, defaulting to 1000 [ 370.925276][T14299] lo speed is unknown, defaulting to 1000 [ 370.981378][ T30] audit: type=1400 audit(1786160608.591:2741): avc: denied { read } for pid=14298 comm="syz.4.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.042698][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2823'. [ 371.067143][T14309] xt_hashlimit: size too large, truncated to 1048576 [ 371.305494][T14313] bridge2: port 1(veth1) entered blocking state [ 371.329951][T14313] bridge2: port 1(veth1) entered disabled state [ 371.344988][T14313] veth1: entered allmulticast mode [ 371.361811][T14313] veth1: entered promiscuous mode [ 371.384916][T14306] bridge2: port 2(veth0_to_bond) entered blocking state [ 371.421301][T14306] bridge2: port 2(veth0_to_bond) entered disabled state [ 371.447749][T14306] veth0_to_bond: entered allmulticast mode [ 371.473204][T14306] veth0_to_bond: entered promiscuous mode [ 371.607863][ T30] audit: type=1400 audit(1786160609.220:2742): avc: denied { write } for pid=14319 comm="syz.5.2827" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 371.639856][ T30] audit: type=1400 audit(1786160609.260:2743): avc: denied { setopt } for pid=14319 comm="syz.5.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.849623][ T30] audit: type=1400 audit(1786160609.450:2744): avc: denied { setopt } for pid=14325 comm="syz.3.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.447510][T14329] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 373.091466][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.099727][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.120412][ T7140] net_ratelimit: 100 callbacks suppressed [ 373.120449][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.433088][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.562024][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.591056][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.741562][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.780441][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.215850][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.256816][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.390693][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.410376][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 374.840301][ T30] audit: type=1400 audit(1786160612.459:2745): avc: denied { write } for pid=14377 comm="syz.5.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 374.892624][ T30] audit: type=1400 audit(1786160612.489:2746): avc: denied { bind } for pid=14377 comm="syz.5.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 374.932375][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2846'. [ 374.948860][T14380] bond5: (slave vlan3): Opening slave failed [ 375.359034][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 375.359050][ T30] audit: type=1400 audit(1786160612.978:2752): avc: denied { write } for pid=14393 comm="syz.5.2851" name="ports" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 375.434389][T14394] nvmet_tcp: address family 255 not supported [ 375.473198][ T30] audit: type=1400 audit(1786160613.028:2753): avc: denied { read write } for pid=14393 comm="syz.5.2851" name="addr_trtype" dev="configfs" ino=52607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 375.567636][ T30] audit: type=1400 audit(1786160613.028:2754): avc: denied { open } for pid=14393 comm="syz.5.2851" path="/432/config/nvmet/ports/1/addr_trtype" dev="configfs" ino=52607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 375.655959][ T30] audit: type=1800 audit(1786160613.038:2755): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2851" name="addr_trtype" dev="configfs" ino=52607 res=0 errno=0 [ 375.756482][ T30] audit: type=1800 audit(1786160613.048:2756): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2851" name="addr_traddr" dev="configfs" ino=52608 res=0 errno=0 [ 375.785060][ T30] audit: type=1800 audit(1786160613.058:2757): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2851" name="addr_adrfam" dev="configfs" ino=52609 res=0 errno=0 [ 375.914688][ T30] audit: type=1400 audit(1786160613.058:2758): avc: denied { write } for pid=14393 comm="syz.5.2851" name="subsystems" dev="configfs" ino=52603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 375.938270][ T30] audit: type=1400 audit(1786160613.058:2759): avc: denied { create } for pid=14393 comm="syz.5.2851" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 375.947205][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2859'. [ 375.972468][ T30] audit: type=1400 audit(1786160613.058:2760): avc: denied { write } for pid=14393 comm="syz.5.2851" name="subsystems" dev="configfs" ino=52603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 376.432087][ T30] audit: type=1400 audit(1786160613.298:2761): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 376.632559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 377.504195][T14437] fuse: fd is not a fuse device [ 378.154106][ T7141] net_ratelimit: 63 callbacks suppressed [ 378.154141][ T7141] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.304363][ T7141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.507201][ T7141] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.631959][ T7141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.752936][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.229802][T11047] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.685201][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.693062][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 379.808220][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.835983][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 380.402816][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 380.402832][ T30] audit: type=1400 audit(1786160618.016:2765): avc: denied { unmount } for pid=14480 comm="syz.1.2875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 381.751991][T14516] lo speed is unknown, defaulting to 1000 [ 381.759464][T14516] lo speed is unknown, defaulting to 1000 [ 381.802772][ T30] audit: type=1400 audit(1786160619.415:2766): avc: denied { bind } for pid=14503 comm="syz.1.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.829282][ T30] audit: type=1400 audit(1786160619.445:2767): avc: denied { write } for pid=14486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.981679][ T30] audit: type=1400 audit(1786160619.595:2768): avc: denied { read } for pid=14503 comm="syz.1.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.864844][ T30] audit: type=1400 audit(1786160620.475:2769): avc: denied { write } for pid=14523 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.153970][T14531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2887'. [ 383.173213][ T7140] net_ratelimit: 53 callbacks suppressed [ 383.173232][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.196290][T14531] fuse: fd is not a fuse device [ 383.205755][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.335218][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.370595][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.542967][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.586985][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.745585][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.886767][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.997204][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.097563][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.238652][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.246090][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.647742][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.697926][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.770410][T14546] ve: left promiscuous mode [ 384.854581][T14546] vlan2: left allmulticast mode [ 384.866584][T14546] bond2: left allmulticast mode [ 384.876168][T14546] geneve2: left allmulticast mode [ 384.898449][T14546] ip6gre1: left promiscuous mode [ 384.914326][T14546] ip6gre1: left allmulticast mode [ 384.956968][ T7498] syz1: Port: 1 Link DOWN [ 384.990652][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.049650][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.088670][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.194637][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.208058][T14573] binder_alloc: 14568: pid 14568 spamming oneway? 1 buffers allocated for a total size of 4096 [ 385.337063][T14571] 9pnet_virtio: no channels available for device syz [ 385.627674][T14577] loop0: detected capacity change from 0 to 128 [ 385.702773][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c57 [ 385.797287][ T30] audit: type=1400 audit(1786160623.303:2770): avc: denied { setopt } for pid=14578 comm="syz.2.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 386.486715][ T30] audit: type=1400 audit(1786160624.093:2771): avc: denied { write } for pid=14566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.603358][T14580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.737817][ T30] audit: type=1400 audit(1786160624.353:2772): avc: denied { write } for pid=14596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.515181][ T30] audit: type=1400 audit(1786160625.002:2773): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 387.675476][T14606] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 387.705061][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'. [ 387.724647][T14606] bond4: (slave lo): making interface the new active one [ 387.744782][T14606] bond4: (slave lo): Enslaving as an active interface with an up link [ 387.756480][ T981] lo speed is unknown, defaulting to 1000 [ 387.762927][ T7479] lo speed is unknown, defaulting to 1000 [ 387.768860][ T7480] lo speed is unknown, defaulting to 1000 [ 387.818157][ T7481] lo speed is unknown, defaulting to 1000 [ 387.824089][ T7478] lo speed is unknown, defaulting to 1000 [ 387.831958][ T7485] lo speed is unknown, defaulting to 1000 [ 387.845651][T14612] vlan4: entered allmulticast mode [ 387.864979][T14612] bridge2: entered allmulticast mode [ 387.943957][T14608] bridge2: port 1(erspan0) entered blocking state [ 387.963054][T14608] bridge2: port 1(erspan0) entered disabled state [ 387.978307][T14608] erspan0: entered allmulticast mode [ 388.006178][T14608] erspan0: entered promiscuous mode [ 388.127074][ T30] audit: type=1400 audit(1786160625.742:2774): avc: denied { write } for pid=14609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.187963][T11047] net_ratelimit: 91 callbacks suppressed [ 388.187985][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.229262][ T30] audit: type=1400 audit(1786160625.842:2775): avc: denied { execute } for pid=14630 comm="syz.1.2910" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.235805][T11047] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.327875][ T30] audit: type=1400 audit(1786160625.932:2776): avc: denied { write } for pid=14638 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.428692][T11047] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.524328][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.857818][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.988125][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.009662][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.159886][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.181300][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 389.328222][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.630933][ T30] audit: type=1400 audit(1786160627.241:2777): avc: denied { connect } for pid=14670 comm="syz.1.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.702091][T14674] fuse: fd is not a fuse device [ 389.745149][ T30] audit: type=1400 audit(1786160627.281:2778): avc: denied { read } for pid=14670 comm="syz.1.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.821040][ T30] audit: type=1400 audit(1786160627.431:2779): avc: denied { write } for pid=14654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.207161][T14694] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2920'. [ 390.814069][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 390.814084][ T30] audit: type=1400 audit(1786160628.421:2782): avc: denied { read append } for pid=14702 comm="syz.5.2924" name="sg0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 390.897732][ T30] audit: type=1400 audit(1786160628.461:2783): avc: denied { open } for pid=14702 comm="syz.5.2924" path="/dev/sg0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 391.089115][ T7485] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 391.239161][ T7485] usb 6-1: Using ep0 maxpacket: 32 [ 391.576813][T14713] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 391.643542][T14713] 8021q: adding VLAN 0 to HW filter on device bond8 [ 391.662641][T14711] vlan1: entered allmulticast mode [ 391.738259][T14711] bond8: entered allmulticast mode [ 391.818847][T14713] bond8: (slave geneve3): making interface the new active one [ 391.847493][ T7485] usb 6-1: unable to get BOS descriptor or descriptor too short [ 391.867544][T14713] geneve3: entered allmulticast mode [ 391.884004][ T7485] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 391.896117][T14713] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 391.920250][ T7485] usb 6-1: can't read configurations, error -71 [ 392.116960][T14723] netlink: 'syz.4.2930': attribute type 21 has an invalid length. [ 392.149929][T14723] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2930'. [ 392.782989][ T30] audit: type=1400 audit(1786160630.390:2784): avc: denied { create } for pid=14730 comm="syz.4.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 392.919590][T14737] xt_SECMARK: invalid mode: 2 [ 393.304757][ T83] net_ratelimit: 78 callbacks suppressed [ 393.304794][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.436290][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.590367][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.602417][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.631481][T14743] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.674747][ T30] audit: type=1400 audit(1786160631.269:2785): avc: denied { append } for pid=14744 comm="syz.1.2938" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 393.710806][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.724826][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.762599][ T30] audit: type=1400 audit(1786160631.289:2786): avc: denied { map } for pid=14744 comm="syz.1.2938" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 393.861258][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.969236][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 394.080829][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.475113][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 395.601939][T14779] 9p: Bad value for 'wfdno' [ 395.788439][T14783] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 395.805844][T14783] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 395.818098][T14783] tipc: Resetting bearer [ 397.100842][T14813] lo speed is unknown, defaulting to 1000 [ 397.109896][T14813] lo speed is unknown, defaulting to 1000 [ 398.062486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 398.122505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 398.372258][ T7140] net_ratelimit: 58 callbacks suppressed [ 398.372275][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.500599][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 398.768790][ T30] audit: type=1400 audit(1786160636.377:2787): avc: denied { setopt } for pid=14826 comm="syz.4.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.792521][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.829910][ T30] audit: type=1400 audit(1786160636.377:2788): avc: denied { connect } for pid=14826 comm="syz.4.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.915772][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 399.044456][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.138795][ T7137] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 399.274937][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.722663][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 399.844292][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.864464][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 400.161250][T14860] block2mtd: error: cannot open device /dev/loop0 [ 400.208312][T14860] MTDSB: Device #1 doesn't appear to exist [ 400.208312][T14860] [ 400.455722][ T30] audit: type=1804 audit(1786160638.066:2789): pid=14864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2972" name="/newroot/482/file0" dev="tmpfs" ino=2563 res=1 errno=0 [ 400.494735][T14864] uprobe: syz.1.2972:14864 failed to unregister, leaking uprobe [ 401.270419][T14872] netlink: 'syz.4.2976': attribute type 4 has an invalid length. [ 401.511325][T14875] netlink: 'syz.4.2976': attribute type 4 has an invalid length. [ 402.770716][ T30] audit: type=1400 audit(1786160640.375:2790): avc: denied { write } for pid=14883 comm="syz.1.2979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 403.475533][ T83] net_ratelimit: 43 callbacks suppressed [ 403.475554][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.525293][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.530843][T14887] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2981'. [ 403.555378][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.595742][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.637817][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.665403][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.685947][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.704414][T14897] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.754970][T14897] bond9: (slave lo): Enslaving as an active interface with an up link [ 403.776220][T14897] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 403.796891][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.848422][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.170124][ T30] audit: type=1400 audit(1786160641.774:2791): avc: denied { append } for pid=14918 comm="syz.1.2991" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 405.527757][T14939] syzkaller0: entered promiscuous mode [ 405.546543][T14939] syzkaller0: entered allmulticast mode [ 407.899322][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3005'. [ 408.066930][T14969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.074234][T14969] IPv6: NLM_F_CREATE should be set when creating new route [ 408.081499][T14969] IPv6: NLM_F_CREATE should be set when creating new route [ 408.123438][T14969] bridge3: entered promiscuous mode [ 408.354712][T14980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3010'. [ 408.417769][ T7483] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 408.438547][T14980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14980 comm=syz.3.3010 [ 408.456678][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'. [ 408.457728][ T7498] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 408.547896][T11044] net_ratelimit: 82 callbacks suppressed [ 408.547916][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.584750][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.639664][ T7498] usb 6-1: unable to get BOS descriptor or descriptor too short [ 408.660544][ T7498] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 408.684024][ T7498] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 408.758146][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.766048][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.828254][ T7483] usb 2-1: Using ep0 maxpacket: 8 [ 408.841431][ T7483] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 408.843485][ T7498] usb 6-1: config 63 has no interface number 0 [ 408.855870][ T7498] usb 6-1: config 63 interface 66 has no altsetting 0 [ 408.869446][ T7498] usb 6-1: string descriptor 0 read error: -22 [ 408.878075][ T7498] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 408.885037][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.894855][ T7498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.899957][ T7498] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 408.903644][ T7483] usb 2-1: config 0 has no interface number 0 [ 408.918767][ T7483] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 408.931524][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.933498][ T7498] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 408.944970][ T7483] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 408.956987][ T7483] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.098181][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.287555][ T7498] uvcvideo 6-1:63.66: No valid video chain found. [ 409.461895][ T7483] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 409.471184][ T7483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.479301][ T7483] usb 2-1: Product: syz [ 409.483917][ T7483] usb 2-1: Manufacturer: syz [ 409.486106][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.511184][ T7498] usb 6-1: USB disconnect, device number 21 [ 409.537517][ T7483] usb 2-1: SerialNumber: syz [ 409.550406][ T7483] usb 2-1: config 0 descriptor?? [ 409.566318][T14977] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 409.598375][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.653658][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.731827][T14997] lo: Caught tx_queue_len zero misconfig [ 409.974017][ T7483] ath6kl: Failed to submit usb control message: -71 [ 409.984644][ T7483] ath6kl: unable to send the bmi data to the device: -71 [ 409.989879][T15001] netlink: 'syz.4.3017': attribute type 1 has an invalid length. [ 409.992317][ T7483] ath6kl: Unable to send get target info: -71 [ 410.018257][ T7483] ath6kl: Failed to init ath6kl core: -71 [ 410.028091][ T7483] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 410.061652][ T7483] usb 2-1: USB disconnect, device number 25 [ 410.141007][T15001] bridge3: entered promiscuous mode [ 410.148868][T15001] bond10: (slave bridge3): making interface the new active one [ 410.157121][T15001] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 410.169606][T15009] netlink: 'syz.5.3018': attribute type 1 has an invalid length. [ 410.178251][T15007] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 410.200154][T15007] bond5: (slave lo): making interface the new active one [ 410.207975][T15007] bond5: (slave lo): Enslaving as an active interface with an up link [ 410.315024][ T30] audit: type=1326 audit(1786160647.911:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.5.3020" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97aff9e0d9 code=0x0 [ 410.470777][T15022] fuse: fd is not a fuse device [ 410.476809][T15022] fuse: fd is not a fuse device [ 410.545848][T15022] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 410.903361][T15030] xt_CONNSECMARK: invalid mode: 0 [ 411.518241][ T7140] Bluetooth: hci5: Frame reassembly failed (-84) [ 413.410423][ T5598] Bluetooth: hci5: command 0x1003 tx timeout [ 413.423171][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 414.365488][T11044] net_ratelimit: 63 callbacks suppressed [ 414.365516][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.388496][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.523751][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.534375][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.651275][ T7141] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.680368][ T7141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.821825][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.849437][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.437021][T11044] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.490404][T11044] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.577695][ T30] audit: type=1400 audit(1786160653.178:2793): avc: denied { setopt } for pid=15092 comm="syz.3.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 415.911966][ T30] audit: type=1400 audit(1786160653.518:2794): avc: denied { create } for pid=15097 comm="syz.5.3047" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 415.973823][T15102] EXT4-fs (loop10): unable to read superblock [ 416.143171][ T30] audit: type=1400 audit(1786160653.748:2795): avc: denied { unlink } for pid=5833 comm="syz-executor" name="file0" dev="tmpfs" ino=2455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.331858][T15113] fuse: Unknown parameter 'u00000000000000000000' [ 417.091607][T15125] overlayfs: failed to resolve './file1': -2 [ 418.002969][T15134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 418.569355][T15134] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3059'. [ 418.640733][T15139] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 418.844639][T15141] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 419.021694][T15141] 8021q: adding VLAN 0 to HW filter on device bond12 [ 419.160817][T15145] vlan3: entered promiscuous mode [ 419.220252][T15145] bond12: entered promiscuous mode [ 419.279921][T15145] vlan3: entered allmulticast mode [ 419.350043][T15145] bond12: entered allmulticast mode [ 419.373670][ T7137] net_ratelimit: 56 callbacks suppressed [ 419.373690][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.437063][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.494816][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.516635][T15148] bond12: (slave bridge4): making interface the new active one [ 419.543630][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.614539][T15148] bridge4: entered promiscuous mode [ 419.634085][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.693689][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.746622][T15148] bridge4: entered allmulticast mode [ 419.754803][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.873567][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.915867][T15148] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 419.947987][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.027728][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.729172][ T30] audit: type=1400 audit(1786160658.326:2796): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 420.865965][T15173] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 420.878900][T15173] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 420.888824][T15173] tipc: Resetting bearer [ 421.970957][T15188] macsec1: entered promiscuous mode [ 421.989858][T15188] virt_wifi0: entered promiscuous mode [ 423.940114][T15215] tipc: Enabling of bearer rejected, failed to enable media [ 424.770686][ T7141] net_ratelimit: 65 callbacks suppressed [ 424.770720][ T7141] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.133760][ T7141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.415069][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 426.668095][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.520830][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.544428][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3090'. [ 427.554943][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.666855][ T30] audit: type=1400 audit(1786160665.252:2797): avc: denied { getopt } for pid=15256 comm="syz.5.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 427.690674][T11046] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.703064][T11046] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.714158][ T30] audit: type=1400 audit(1786160665.282:2798): avc: denied { read write } for pid=15256 comm="syz.5.3092" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 427.822587][ T30] audit: type=1400 audit(1786160665.282:2799): avc: denied { open } for pid=15256 comm="syz.5.3092" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 427.847546][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.855651][ T7145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 428.612322][T15265] EXT4-fs (loop8): unable to read superblock [ 428.794856][T15271] nftables ruleset with unbound chain [ 428.830170][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3095'. [ 428.839212][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3095'. [ 430.276501][ T7140] net_ratelimit: 34 callbacks suppressed [ 430.276521][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.310728][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.419877][T15289] syzkaller0: entered promiscuous mode [ 430.428825][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.436280][T15289] syzkaller0: entered allmulticast mode [ 430.455941][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.584345][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.745394][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.012441][ T30] audit: type=1400 audit(1786160668.601:2800): avc: denied { mounton } for pid=15293 comm="syz.2.3104" path=2F3538312FE91F7189591E9233614B dev="tmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 431.049273][T11046] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.077374][T11046] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.219471][ T7139] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.238905][ T7139] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.428730][T15306] EXT4-fs (loop2): unable to read superblock [ 431.459299][ T7483] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 431.554147][T15312] syzkaller0: entered promiscuous mode [ 431.559751][T15312] syzkaller0: entered allmulticast mode [ 431.635510][ T7483] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.653929][ T7483] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.714580][ T7483] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.735317][ T7483] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.776050][ T7483] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 431.912785][ T7483] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.060922][ T7483] usb 6-1: Product: syz [ 432.135841][ T7483] usb 6-1: Manufacturer: syz [ 432.208339][ T7483] cdc_wdm 6-1:1.0: skipping garbage [ 432.221356][ T7483] cdc_wdm 6-1:1.0: skipping garbage [ 432.233427][ T7483] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 432.239438][ T7483] cdc_wdm 6-1:1.0: Unknown control protocol [ 432.258497][T15319] netlink: 'syz.2.3113': attribute type 1 has an invalid length. [ 432.273843][T15319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.281133][T15319] IPv6: NLM_F_CREATE should be set when creating new route [ 432.367421][T15326] bridge3: entered promiscuous mode [ 432.390708][T15326] bridge3: entered allmulticast mode [ 432.582295][ T30] audit: type=1400 audit(1786160670.180:2801): avc: denied { read write } for pid=15302 comm="syz.5.3106" name="cdc-wdm0" dev="devtmpfs" ino=3151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 432.646379][ T30] audit: type=1400 audit(1786160670.180:2802): avc: denied { open } for pid=15302 comm="syz.5.3106" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 432.647544][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.676877][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.683583][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.690190][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.696545][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.703146][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.709400][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.715990][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.722281][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.728875][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.735169][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.741760][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.748009][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.754590][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.761013][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.767604][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.773879][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.780462][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.786706][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 432.793289][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 432.809472][ T7499] usb 6-1: USB disconnect, device number 22 [ 432.815428][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 432.836924][T15304] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 432.920211][ T7483] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 434.279593][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 434.325997][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'. [ 434.418697][ T7483] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.551563][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.560818][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.575669][T15354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.592546][ T7483] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 434.600211][ T7483] usb 2-1: can't read configurations, error -71 [ 435.284587][ T7145] net_ratelimit: 72 callbacks suppressed [ 435.284625][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.511652][T15355] vlan2: entered promiscuous mode [ 435.681434][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.689297][T15355] bond5: entered promiscuous mode [ 435.701568][T15355] vlan2: entered allmulticast mode [ 435.716565][T15355] bond5: entered allmulticast mode [ 435.721528][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.771559][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.813186][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.849291][T15360] bridge3: entered promiscuous mode [ 435.856181][ T30] audit: type=1400 audit(1786160673.438:2803): avc: denied { associate } for pid=15368 comm="syz.1.3127" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 435.861928][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.981680][T15360] bridge3: entered allmulticast mode [ 435.992039][T15360] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 436.181910][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.362455][T15376] fuse: fd is not a fuse device [ 436.455830][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.936769][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.082126][T11046] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.629200][ T30] audit: type=1400 audit(1786160675.217:2804): avc: denied { nlmsg_write } for pid=15399 comm="syz.1.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 437.765035][ T30] audit: type=1107 audit(1786160675.217:2805): pid=15399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 440.336627][ T7145] net_ratelimit: 34 callbacks suppressed [ 440.336643][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.385001][ T7145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.513987][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.546055][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.616318][T15448] netlink: 'syz.3.3145': attribute type 28 has an invalid length. [ 440.624252][T15448] netlink: 'syz.3.3145': attribute type 29 has an invalid length. [ 440.632258][T15448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3145'. [ 440.694494][ T83] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.727715][ T83] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.008115][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.017490][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.154584][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.194144][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.680128][ T30] audit: type=1400 audit(1786160679.265:2806): avc: denied { bind } for pid=15465 comm="syz.2.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.754419][ T7498] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 441.946229][ T7498] usb 2-1: Using ep0 maxpacket: 32 [ 441.967812][ T7498] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.003531][ T7498] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 442.031842][ T7498] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 442.056255][ T7498] usb 2-1: Product: syz [ 442.075510][ T7498] usb 2-1: Manufacturer: syz [ 442.095711][ T7498] usb 2-1: config 0 descriptor?? [ 442.150764][ T7498] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 442.836091][ T7498] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 442.863352][ T7498] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 442.907849][ T7498] usb 2-1: USB disconnect, device number 28 [ 444.709633][T15511] bond5: (slave lo): Releasing active interface [ 444.726738][T15511] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 445.386489][ T7140] net_ratelimit: 64 callbacks suppressed [ 445.386505][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.420965][ T7140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.547605][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.586399][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.623320][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3169'. [ 445.633564][T15524] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 445.640683][T15524] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 445.647507][T15524] bridge0: port 2(wlan1) entered disabled state [ 445.726404][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.776388][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.816624][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.863387][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 445.863471][T15526] vlan5: entered promiscuous mode [ 445.901190][ T7140] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.936632][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.966880][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.983011][T15526] hsr0: entered promiscuous mode [ 446.016042][T15526] vlan5: entered allmulticast mode [ 446.057495][T15526] hsr0: entered allmulticast mode [ 446.076764][T15526] hsr_slave_0: entered allmulticast mode [ 446.093394][T15526] hsr_slave_1: entered allmulticast mode [ 446.190377][T15529] hsr_slave_0: left promiscuous mode [ 446.240070][T15529] hsr_slave_1: left promiscuous mode [ 446.246604][ T7499] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 446.523105][T15537] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 446.878467][ T7499] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 446.893072][ T7499] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 446.912139][ T7499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.228093][ T30] audit: type=1400 audit(1786160684.803:2807): avc: denied { getopt } for pid=15538 comm="syz.5.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 447.918803][ T7499] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -71 [ 447.962943][ T7499] usb 2-1: USB disconnect, device number 29 [ 448.829199][T15570] netlink: 'syz.1.3181': attribute type 1 has an invalid length. [ 448.956572][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 449.035081][T15567] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.042348][T15567] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.105704][T15567] tipc: Resetting bearer [ 450.408729][ T7145] net_ratelimit: 137 callbacks suppressed [ 450.408741][ T7145] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.488842][T11050] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.508774][T11050] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.540591][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.609005][ T7137] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.688886][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.768981][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.430723][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.461101][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.479567][ T7132] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.549633][ T30] audit: type=1400 audit(1786160689.120:2808): avc: denied { unlink } for pid=15606 comm="syz.5.3187" name="#19" dev="tmpfs" ino=2611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 452.581015][T15614] fuse: fd is not a fuse device [ 452.603143][T15614] fuse: fd is not a fuse device [ 453.388656][T15567] tipc: Resetting bearer [ 453.503261][T15570] bond3: entered promiscuous mode [ 453.512134][T15570] bond3: entered allmulticast mode [ 453.521487][T15570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.531909][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.545758][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.560644][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 56522 - 0 [ 453.574361][T15571] erspan1: entered allmulticast mode [ 453.592290][T15571] bond3: (slave erspan1): making interface the new active one [ 453.600706][T15571] erspan1: entered promiscuous mode [ 453.623246][T15571] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 453.716304][T15572] bond3 (unregistering): (slave erspan1): Releasing active interface [ 453.730446][T15572] erspan1: left promiscuous mode [ 453.772466][T15572] bond3 (unregistering): Released all slaves [ 453.859552][T15619] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 454.023499][T11050] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.136810][T11050] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.195871][T11050] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 56522 - 0 [ 454.380800][ T7132] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.447399][ T7132] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.519609][ T7132] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 56522 - 0 [ 454.593577][ T7132] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.702673][ T7132] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.838001][ T7132] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 56522 - 0 [ 455.769475][ T30] audit: type=1400 audit(1786160693.348:2809): avc: denied { kexec_image_load } for pid=15651 comm="syz.2.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 456.200570][ T30] audit: type=1400 audit(1786160693.738:2810): avc: denied { remount } for pid=15658 comm="syz.1.3199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 456.655301][ T30] audit: type=1400 audit(1786160694.228:2811): avc: denied { write } for pid=15630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.722221][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 457.095594][ T30] audit: type=1400 audit(1786160694.678:2812): avc: denied { write } for pid=15670 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.965673][T15686] tipc: Started in network mode [ 458.009477][T15686] tipc: Node identity 1000001, cluster identity 4369 [ 458.063467][T15686] tipc: Node number set to 16777217 [ 458.185201][T15686] tipc: Cannot configure node identity twice [ 458.371462][T15695] tipc: New replicast peer: 127.0.0.1 [ 458.440942][T15695] tipc: Enabled bearer , priority 10 [ 458.688183][ T30] audit: type=1400 audit(1786160696.267:2813): avc: denied { write } for pid=15678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.713988][T15686] bond1: entered promiscuous mode [ 458.736827][T15686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.896915][ T30] audit: type=1400 audit(1786160696.477:2814): avc: denied { write } for pid=15697 comm="syz.3.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 459.002364][ T30] audit: type=1400 audit(1786160696.557:2815): avc: denied { write } for pid=15718 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.036630][T15720] netlink: 'syz.5.3209': attribute type 1 has an invalid length. [ 459.171330][T15720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.816880][T15723] vlan4: entered promiscuous mode [ 459.852206][T15723] bond4: entered promiscuous mode [ 459.882292][T15723] vlan4: entered allmulticast mode [ 459.935180][T15723] bond4: entered allmulticast mode [ 460.055186][T15724] bond4: (slave bridge5): making interface the new active one [ 460.080671][T15724] bridge5: entered promiscuous mode [ 460.097938][T15724] bridge5: entered allmulticast mode [ 460.119950][T15724] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 460.328053][ T30] audit: type=1400 audit(1786160697.896:2816): avc: denied { audit_read } for pid=15746 comm="syz.2.3214" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.454465][ T30] audit: type=1400 audit(1786160698.026:2817): avc: denied { write } for pid=15729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.693875][ T7483] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 460.796166][ T30] audit: type=1400 audit(1786160698.376:2818): avc: denied { write } for pid=15762 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.883517][ T7483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 460.921619][ T7483] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.047999][ T7483] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 461.057125][ T7483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.070159][ T7483] usb 6-1: config 0 descriptor?? [ 462.320273][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.366958][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.801037][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.833886][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.849916][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.866136][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.873861][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.884122][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.896679][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 462.920875][ T7483] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 463.037697][ T7483] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 463.209615][ T7483] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 463.217904][ T7483] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 463.232931][ T7483] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 463.247807][ T7483] usb 6-1: USB disconnect, device number 23 [ 463.350659][T15793] Invalid ELF header type: 2 != 1 [ 463.705456][ T30] audit: type=1400 audit(1786160700.924:2819): avc: denied { module_load } for pid=15784 comm="syz.3.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 464.254523][T15786] fido_id[15786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 465.526487][ T30] audit: type=1400 audit(1786160703.093:2820): avc: denied { write } for pid=15782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.311835][ T30] audit: type=1400 audit(1786160703.883:2821): avc: denied { write } for pid=15818 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.355228][ T30] audit: type=1400 audit(1786160705.922:2822): avc: denied { write } for pid=15836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.542707][ T30] audit: type=1400 audit(1786160706.112:2823): avc: denied { write } for pid=15852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.687834][ T30] audit: type=1400 audit(1786160706.152:2824): avc: denied { setopt } for pid=15854 comm="syz.2.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 469.625998][ T30] audit: type=1400 audit(1786160707.191:2825): avc: denied { read } for pid=15867 comm="syz.5.3231" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 469.695930][ T30] audit: type=1400 audit(1786160707.191:2826): avc: denied { open } for pid=15867 comm="syz.5.3231" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 469.746019][ T30] audit: type=1400 audit(1786160707.251:2827): avc: denied { ioctl } for pid=15867 comm="syz.5.3231" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 471.025521][ T30] audit: type=1400 audit(1786160708.591:2828): avc: denied { bind } for pid=15889 comm="syz.5.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 472.025569][T15899] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 474.165768][ T30] audit: type=1400 audit(1786160711.739:2829): avc: denied { execmod } for pid=15916 comm="syz.4.3249" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 474.261137][T15920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50645 sclass=netlink_route_socket pid=15920 comm=syz.2.3250 [ 474.280526][ T30] audit: type=1400 audit(1786160711.769:2830): avc: denied { execute } for pid=15916 comm="syz.4.3249" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 474.348139][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3250'. [ 474.635096][T15930] jffs2: notice: (15930) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 475.425055][ T30] audit: type=1400 audit(1786160712.998:2831): avc: denied { write } for pid=15928 comm="syz.1.3254" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.794320][ T30] audit: type=1400 audit(1786160713.368:2832): avc: denied { create } for pid=15947 comm="syz.2.3258" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 475.801179][T15948] fuse: Bad value for 'fd' [ 475.867455][ T30] audit: type=1400 audit(1786160713.368:2833): avc: denied { mounton } for pid=15947 comm="syz.2.3258" path="/611/file0" dev="tmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 475.931923][T15950] tipc: Enabling of bearer rejected, already enabled [ 476.009944][T15950] bond2: entered promiscuous mode [ 476.045216][T15950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.288644][ T30] audit: type=1400 audit(1786160713.848:2834): avc: denied { write } for pid=15947 comm="syz.2.3258" name="file0" dev="tmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.379078][ T30] audit: type=1400 audit(1786160713.858:2835): avc: denied { open } for pid=15947 comm="syz.2.3258" path="/611/file0" dev="tmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.632511][ T30] audit: type=1326 audit(1786160713.888:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cdb9e0d9 code=0x7ffc0000 [ 476.965807][ T30] audit: type=1326 audit(1786160713.888:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cdb9e0d9 code=0x7ffc0000 [ 477.051346][ T30] audit: type=1326 audit(1786160713.888:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f44cdb9e0d9 code=0x7ffc0000 [ 477.257828][T15978] CIFS: Attempting to mount //127.0.0.1/share [ 477.298552][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3262'. [ 477.399100][T15985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.460521][T15985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.528247][T15985] bond0 (unregistering): Released all slaves [ 478.094691][T15978] CIFS: VFS: Error connecting to socket. Aborting operation. [ 478.126185][T15978] CIFS: VFS: cifs_mount failed w/return code = -4 [ 478.199876][T16006] vlan3: entered promiscuous mode [ 478.205086][T16006] hsr0: entered promiscuous mode [ 478.210539][T16006] vlan3: entered allmulticast mode [ 478.218222][T16006] hsr0: entered allmulticast mode [ 478.223739][T16006] hsr_slave_0: entered allmulticast mode [ 478.229484][T16006] hsr_slave_1: entered allmulticast mode [ 478.402502][T16004] syzkaller0: entered promiscuous mode [ 478.469584][T16013] netlink: 'syz.2.3270': attribute type 15 has an invalid length. [ 478.505027][T16004] syzkaller0: entered allmulticast mode [ 478.595720][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.610389][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 478.634947][T16012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.694194][T16013] netlink: 'syz.2.3270': attribute type 15 has an invalid length. [ 478.702921][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.714963][T16006] hsr_slave_0: left promiscuous mode [ 478.728809][T16006] hsr_slave_1: left promiscuous mode [ 478.763008][T11047] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 478.776309][T11047] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 478.824321][T11047] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 478.848479][T11047] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 480.322338][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 480.322365][ T30] audit: type=1400 audit(1786160717.886:2856): avc: denied { append } for pid=16056 comm="syz.1.3279" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 480.408565][T16060] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5603] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16060] [ 480.773461][ T30] audit: type=1400 audit(1786160718.296:2857): avc: denied { write } for pid=16028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.601888][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 481.610763][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 481.620858][ T50] Bluetooth: hci4: hardware error 0x00 [ 481.643022][T16070] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 481.773603][ T50] ================================================================== [ 481.781682][ T50] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40 [ 481.789395][ T50] Read of size 1 at addr ffff888079cda5a0 by task kworker/u9:0/50 [ 481.797179][ T50] [ 481.799488][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.799510][ T50] Tainted: [L]=SOFTLOCKUP [ 481.799515][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 481.799525][ T50] Workqueue: hci4 hci_error_reset [ 481.799548][ T50] Call Trace: [ 481.799554][ T50] [ 481.799561][ T50] dump_stack_lvl+0x100/0x190 [ 481.799580][ T50] print_report+0x13d/0x4b0 [ 481.799602][ T50] ? __virt_addr_valid+0x239/0x430 [ 481.799620][ T50] ? _raw_spin_lock_bh+0x33/0x40 [ 481.799636][ T50] kasan_report+0xdf/0x1c0 [ 481.799656][ T50] ? _raw_spin_lock_bh+0x33/0x40 [ 481.799673][ T50] ? _raw_spin_lock_bh+0x33/0x40 [ 481.799688][ T50] __kasan_check_byte+0x36/0x50 [ 481.799707][ T50] lock_acquire+0x132/0x370 [ 481.799726][ T50] ? preempt_schedule_thunk+0x16/0x40 [ 481.799742][ T50] _raw_spin_lock_bh+0x33/0x40 [ 481.799757][ T50] ? bt_accept_unlink+0x64/0x370 [ 481.799772][ T50] bt_accept_unlink+0x64/0x370 [ 481.799789][ T50] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 481.799815][ T50] l2cap_chan_del+0xa6/0x920 [ 481.799832][ T50] l2cap_conn_del+0x34f/0x6b0 [ 481.799848][ T50] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 481.799864][ T50] l2cap_disconn_cfm+0x9f/0x100 [ 481.799878][ T50] hci_conn_hash_flush+0x10e/0x280 [ 481.799901][ T50] hci_dev_close_sync+0x5cf/0x13c0 [ 481.799926][ T50] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 481.799956][ T50] hci_dev_do_close+0x2e/0xb0 [ 481.799974][ T50] hci_error_reset+0xbf/0x380 [ 481.799994][ T50] process_one_work+0xa23/0x1940 [ 481.800014][ T50] ? __pfx_process_one_work+0x10/0x10 [ 481.800033][ T50] ? __pfx_hci_error_reset+0x10/0x10 [ 481.800053][ T50] worker_thread+0x5ef/0xe50 [ 481.800072][ T50] ? kthread+0x13a/0x450 [ 481.800085][ T50] ? __pfx_worker_thread+0x10/0x10 [ 481.800100][ T50] kthread+0x370/0x450 [ 481.800112][ T50] ? __pfx_kthread+0x10/0x10 [ 481.800128][ T50] ret_from_fork+0x72b/0xd50 [ 481.800149][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 481.800170][ T50] ? __switch_to+0x800/0x10f0 [ 481.800185][ T50] ? __pfx_kthread+0x10/0x10 [ 481.800199][ T50] ret_from_fork_asm+0x1a/0x30 [ 481.800225][ T50] [ 481.800230][ T50] [ 482.015146][ T50] Allocated by task 15808: [ 482.019547][ T50] kasan_save_stack+0x30/0x50 [ 482.024210][ T50] kasan_save_track+0x14/0x30 [ 482.028870][ T50] __kasan_kmalloc+0xaa/0xb0 [ 482.033439][ T50] __kmalloc_noprof+0x322/0x820 [ 482.038270][ T50] tls_sw_sendmsg+0x11ee/0x2e00 [ 482.043102][ T50] inet6_sendmsg+0x11c/0x140 [ 482.047669][ T50] sock_write_iter+0x41a/0x5b0 [ 482.052417][ T50] do_iter_readv_writev+0x6f7/0x930 [ 482.057599][ T50] vfs_writev+0x360/0xdd0 [ 482.061913][ T50] do_writev+0x28a/0x340 [ 482.066144][ T50] do_syscall_64+0x115/0x870 [ 482.070716][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.076586][ T50] [ 482.078893][ T50] Freed by task 15808: [ 482.082936][ T50] kasan_save_stack+0x30/0x50 [ 482.087592][ T50] kasan_save_track+0x14/0x30 [ 482.092250][ T50] kasan_save_free_info+0x3b/0x70 [ 482.097250][ T50] __kasan_slab_free+0x5f/0x80 [ 482.101994][ T50] kfree+0x22b/0x6c0 [ 482.105870][ T50] tls_tx_records+0x46f/0x720 [ 482.110527][ T50] tls_sw_sendmsg+0x10fc/0x2e00 [ 482.115367][ T50] inet6_sendmsg+0x11c/0x140 [ 482.119941][ T50] sock_write_iter+0x41a/0x5b0 [ 482.124691][ T50] do_iter_readv_writev+0x6f7/0x930 [ 482.129873][ T50] vfs_writev+0x360/0xdd0 [ 482.134187][ T50] do_writev+0x28a/0x340 [ 482.138413][ T50] do_syscall_64+0x115/0x870 [ 482.142987][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.148869][ T50] [ 482.151171][ T50] The buggy address belongs to the object at ffff888079cda000 [ 482.151171][ T50] which belongs to the cache kmalloc-2k of size 2048 [ 482.165199][ T50] The buggy address is located 1440 bytes inside of [ 482.165199][ T50] freed 2048-byte region [ffff888079cda000, ffff888079cda800) [ 482.179142][ T50] [ 482.181444][ T50] The buggy address belongs to the physical page: [ 482.187826][ T50] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79cd8 [ 482.196564][ T50] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 482.205039][ T50] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 482.212563][ T50] page_type: f5(slab) [ 482.216521][ T50] raw: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 482.225087][ T50] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 482.233650][ T50] head: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 482.242313][ T50] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 482.250971][ T50] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 482.259621][ T50] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 482.268279][ T50] page dumped because: kasan: bad access detected [ 482.274667][ T50] page_owner tracks the page as allocated [ 482.280366][ T50] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5257, tgid 5257 (dhcpcd), ts 67170987807, free_ts 67138758709 [ 482.300573][ T50] post_alloc_hook+0xfd/0x120 [ 482.305233][ T50] get_page_from_freelist+0xf48/0x3530 [ 482.310683][ T50] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 482.316556][ T50] new_slab+0xa2/0x640 [ 482.320600][ T50] refill_objects+0xe3/0x410 [ 482.325165][ T50] __pcs_replace_empty_main+0x376/0x680 [ 482.330691][ T50] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 482.337092][ T50] kmalloc_reserve+0xe8/0x350 [ 482.341768][ T50] pskb_expand_head+0x249/0x10e0 [ 482.346690][ T50] netlink_trim+0x22d/0x2f0 [ 482.351178][ T50] netlink_broadcast_filtered+0x6d/0xf20 [ 482.356788][ T50] nlmsg_notify+0xb1/0x290 [ 482.361184][ T50] rtmsg_ifinfo+0x177/0x1b0 [ 482.365674][ T50] __dev_notify_flags+0x24c/0x2e0 [ 482.370675][ T50] netif_change_flags+0x108/0x160 [ 482.375679][ T50] dev_change_flags+0xba/0x260 [ 482.380426][ T50] page last free pid 4951 tgid 4951 stack trace: [ 482.386725][ T50] __free_frozen_pages+0x79f/0x1090 [ 482.391908][ T50] qlist_free_all+0x47/0xf0 [ 482.396395][ T50] kasan_quarantine_reduce+0x1a0/0x1f0 [ 482.401834][ T50] __kasan_slab_alloc+0x69/0x90 [ 482.406665][ T50] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 482.412541][ T50] __alloc_skb+0x140/0x710 [ 482.416938][ T50] alloc_skb_with_frags+0xdd/0x760 [ 482.422036][ T50] sock_alloc_send_pskb+0x801/0x980 [ 482.427213][ T50] unix_dgram_sendmsg+0x3c7/0x1810 [ 482.432305][ T50] __sys_sendto+0x48b/0x4e0 [ 482.436788][ T50] __x64_sys_sendto+0xe0/0x1c0 [ 482.441529][ T50] do_syscall_64+0x115/0x870 [ 482.446101][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.451973][ T50] [ 482.454271][ T50] Memory state around the buggy address: [ 482.459875][ T50] ffff888079cda480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.467911][ T50] ffff888079cda500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.475964][ T50] >ffff888079cda580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.483997][ T50] ^ [ 482.489082][ T50] ffff888079cda600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.497120][ T50] ffff888079cda680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.505155][ T50] ================================================================== [ 482.513275][ T50] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 482.520457][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.531303][ T50] Tainted: [L]=SOFTLOCKUP [ 482.535610][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 482.545649][ T50] Workqueue: hci4 hci_error_reset [ 482.550667][ T50] Call Trace: [ 482.553931][ T50] [ 482.556843][ T50] dump_stack_lvl+0x100/0x190 [ 482.561504][ T50] vpanic+0x552/0x970 [ 482.565464][ T50] ? __pfx_vpanic+0x10/0x10 [ 482.569945][ T50] ? mark_held_locks+0x40/0x70 [ 482.574693][ T50] ? irqentry_exit+0x24d/0xa00 [ 482.579445][ T50] ? _raw_spin_lock_bh+0x33/0x40 [ 482.584374][ T50] panic+0xd1/0xe0 [ 482.588075][ T50] ? __pfx_panic+0x10/0x10 [ 482.592474][ T50] ? check_panic_on_warn+0x1f/0x90 [ 482.597568][ T50] check_panic_on_warn.cold+0x19/0x34 [ 482.602924][ T50] end_report.part.0+0x3a/0x90 [ 482.607673][ T50] kasan_report.cold+0xe/0x18 [ 482.612337][ T50] ? _raw_spin_lock_bh+0x33/0x40 [ 482.617256][ T50] ? _raw_spin_lock_bh+0x33/0x40 [ 482.622176][ T50] __kasan_check_byte+0x36/0x50 [ 482.627010][ T50] lock_acquire+0x132/0x370 [ 482.631497][ T50] ? preempt_schedule_thunk+0x16/0x40 [ 482.636850][ T50] _raw_spin_lock_bh+0x33/0x40 [ 482.641597][ T50] ? bt_accept_unlink+0x64/0x370 [ 482.646515][ T50] bt_accept_unlink+0x64/0x370 [ 482.651263][ T50] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 482.656623][ T50] l2cap_chan_del+0xa6/0x920 [ 482.661195][ T50] l2cap_conn_del+0x34f/0x6b0 [ 482.665855][ T50] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 482.671294][ T50] l2cap_disconn_cfm+0x9f/0x100 [ 482.676127][ T50] hci_conn_hash_flush+0x10e/0x280 [ 482.681226][ T50] hci_dev_close_sync+0x5cf/0x13c0 [ 482.686328][ T50] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 482.691863][ T50] hci_dev_do_close+0x2e/0xb0 [ 482.696524][ T50] hci_error_reset+0xbf/0x380 [ 482.701186][ T50] process_one_work+0xa23/0x1940 [ 482.706113][ T50] ? __pfx_process_one_work+0x10/0x10 [ 482.711468][ T50] ? __pfx_hci_error_reset+0x10/0x10 [ 482.716739][ T50] worker_thread+0x5ef/0xe50 [ 482.721313][ T50] ? kthread+0x13a/0x450 [ 482.725534][ T50] ? __pfx_worker_thread+0x10/0x10 [ 482.730631][ T50] kthread+0x370/0x450 [ 482.734679][ T50] ? __pfx_kthread+0x10/0x10 [ 482.739247][ T50] ret_from_fork+0x72b/0xd50 [ 482.743828][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 482.748926][ T50] ? __switch_to+0x800/0x10f0 [ 482.753586][ T50] ? __pfx_kthread+0x10/0x10 [ 482.758157][ T50] ret_from_fork_asm+0x1a/0x30 [ 482.762914][ T50] [ 482.766235][ T50] Kernel Offset: disabled [ 482.770531][ T50] Rebooting in 86400 seconds..