last executing test programs: 1m11.091776389s ago: executing program 3 (id=4): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e260e"], 0x10) epoll_create1(0x80000) 1m9.670455297s ago: executing program 3 (id=13): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000196c0)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000017, 0x50, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000194c0)=0x7) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000019500)={0x0, 0x0, &(0x7f0000019540)={&(0x7f0000019580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) io_setup(0x3f, &(0x7f0000019680)) setuid(0xee01) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1200, 0x8000000000000001, 0xe8, 0x82, 0x0, 0x0, 0xb900}) 1m6.191685669s ago: executing program 3 (id=16): r0 = socket(0x40000000015, 0x5, 0x0) getpeername$netlink(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}], 0x1, 0x4050000) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x0, 0x80800) socket$unix(0x1, 0x2, 0x0) syz_open_dev$evdev(0x0, 0xff, 0x0) ppoll(&(0x7f0000008040)=[{0xffffffffffffffff, 0x90}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x8, 0x61, 0x3, 0x0, 0x95, 0x8, 0x401, 0x7, 0x3b, 0x53, 0x1, 0xd, 0x6, 0x9, 0x2]}, &(0x7f00000003c0)=0x100) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 50.476915203s ago: executing program 32 (id=16): r0 = socket(0x40000000015, 0x5, 0x0) getpeername$netlink(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}], 0x1, 0x4050000) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x0, 0x80800) socket$unix(0x1, 0x2, 0x0) syz_open_dev$evdev(0x0, 0xff, 0x0) ppoll(&(0x7f0000008040)=[{0xffffffffffffffff, 0x90}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x8, 0x61, 0x3, 0x0, 0x95, 0x8, 0x401, 0x7, 0x3b, 0x53, 0x1, 0xd, 0x6, 0x9, 0x2]}, &(0x7f00000003c0)=0x100) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 11.880586057s ago: executing program 2 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001080)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001a080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000001a0c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f000001a100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f000001a140)={0x0, 0x0, &(0x7f000001a180)={&(0x7f000001a1c0)={0x1c, r6, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = open(&(0x7f0000000300)='./bus\x00', 0x143bc2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r8, &(0x7f0000000380)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffdfffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x2, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) 9.618884582s ago: executing program 2 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r1, 0x6ad201de470bc11b, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}]}, 0x34}}, 0x44050) 9.184590271s ago: executing program 1 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.734599918s ago: executing program 4 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001080)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001a080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000001a0c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f000001a100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f000001a140)={0x0, 0x0, &(0x7f000001a180)={&(0x7f000001a1c0)={0x1c, r6, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = open(&(0x7f0000000300)='./bus\x00', 0x143bc2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r8, &(0x7f0000000380)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffdfffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x2, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) 8.692962075s ago: executing program 5 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0002802c00018014000300200174e500000000000000000000000214000400fe8000000000000000000000000000bb0c000280050001"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a220000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={r6}, 0x4) symlinkat(&(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x8, &(0x7f00000015c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000001600)='./file1\x00', &(0x7f0000001640), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000016c0)='./file0/file2\x00', 0x1000) sendmsg$inet(r5, &(0x7f0000001700)={&(0x7f0000001740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001780)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000017c0)={r5}) r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) 7.913300976s ago: executing program 4 (id=197): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x8400) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000500feff849a09eb288e6d3d5924083574ff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000b29cfad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf", 0xd8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000001040)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) 6.004250279s ago: executing program 2 (id=199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 5.696529531s ago: executing program 2 (id=200): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 5.32091313s ago: executing program 1 (id=203): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000080)={0x8, 0x1ff, 0xd5, 0x9, 0x0, "23f555d9adb42d1808020e90d1beaa82dc1ecf", 0x100}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f000021a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) 5.293950365s ago: executing program 4 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.220958371s ago: executing program 5 (id=206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a80), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040) 4.903132495s ago: executing program 0 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000000)) 4.839015004s ago: executing program 4 (id=208): openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007f9, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file3\x00', 0x64042, 0x49) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r7, 0xc080aebe, &(0x7f0000000040)) r8 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x883, 0x0) ioctl$DM_DEV_CREATE(r8, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) 4.816001474s ago: executing program 5 (id=209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e80)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f0000000ec0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000f80)={0xa, 0x4e23, 0x4, @loopback}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000010c0)={0x0, 0x1d, 0xdf}, 0x8) 4.739601287s ago: executing program 5 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001080)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001a080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000001a0c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f000001a100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f000001a140)={0x0, 0x0, &(0x7f000001a180)={&(0x7f000001a1c0)={0x1c, r6, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x143bc2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffdfffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x2, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) 3.578449291s ago: executing program 1 (id=211): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000007c0)='G', 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 3.432971963s ago: executing program 4 (id=212): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000a40)=""/64, 0x40) 3.431447192s ago: executing program 5 (id=213): r0 = syz_io_uring_setup(0xcb2, &(0x7f00000005c0)={0x0, 0x10c8, 0x8, 0x40080004, 0x91}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000007c0), 0xa002a0}], &(0x7f0000000800), 0x2}, 0x20) 3.325338862s ago: executing program 1 (id=214): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) 3.297746113s ago: executing program 0 (id=215): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000900)={0xa, 0x4e33, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000024c0)="33ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0db4093532513a76eaae51091a099121e7c3d05ec1071773c2a79f81d090a0ecbe218d4154c07f1ac883f5238bb7ce771f57672f2da3c8efda6acd3f0ffdc9c8f46cbcd656822e32c4d95502e1e57c64f01b3721157d2c18fa885c3e52b9884f36fed6a4fae15e7517f1baef9462cc33e52d58dd171", 0x353}, {&(0x7f0000002340)="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", 0x16a}, {&(0x7f0000000ec0)="dd8ad35a05f68247883f33637734e01a1ea22d623005c50c3ff46bbed74a12cf717914cb4a307931a5fe143b9a14445961406bdbadf61009fde24fccf2021d7aeae1d6", 0x43}, {&(0x7f0000000980)="cef630eda921cbed97adbad453556e05899dd1984423a16217f977b0af37470370048991ae14603d70c2a7f41e4863a52c1bbacf4e0330e321cb87d66d3e2f0aa47fdd9dede1b5852a39188358e6d77e3ad6bbecbf31b457a2bb1ef2b79b7eb795bc91fde42169ad5c0c4d393e3d8e4ac81db2580a9684683ffa", 0x7a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x840) 3.293562755s ago: executing program 1 (id=216): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050155002528"], 0x0}, 0x0) r1 = msgget$private(0x0, 0x4a3) msgctl$IPC_SET(r1, 0x1, 0x0) 3.154767464s ago: executing program 0 (id=217): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000180)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 3.061173118s ago: executing program 0 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001840)={0x2f4, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x2e0, 0xae, 0x0, 0x1, [@nested={0xd1, 0xcf, 0x0, 0x1, [@generic="d58564f01ad678ce02514e39d1bac41f744e59298ec3a538e773476f2069d1f791a037e321951527dcdf47fdd47f36ad775dfc9c4699285cf4154e18ac71a54bf77b90458a91f5a2577363e39951b7f0c55959f926e8a8a2f64d4f335ebd32afbaaeb5a67a9fe1b5c71b695e26d589d11806d17d7e7ccfa24bf96ddc13fe7fd342bd99fb6cfbd06fe44b16f77d2120d46b0906d9da1f74f87ddca3269b6058ce95f472f85d47db3161ad779d9f9e5beb3ec9061ac27f0f1d47", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, @generic="e6e1ff08046d42f743af2a923a78a8664367df3669d6094a26fa7bbabc78f2e0b2c5a5f80b82981301bda04d272d7abaa8586af092802d4a498d90635e2782bd8a82bb58ff9c28d7a94a60c5b64ac0c7bf8b0d28ebce359c9ab5860e2963655cbd3fc24c4294a10b724e9ed96abf6a6c1af7d04ea6353b1fbacac0612f0ceac13bf265afb88ec09aa616067792cd1dd6dd50b4228df5a006374219b0f2d351d5cea1a50961ad358fc90a7ba11e4d6cda6b6ab1f3195f06b1ab737b5117ce745db461f7eb79b6b1246dc5c4aa929c930969cbce35c598d387ccb556aa283ce9254340a123aa08d3dcbb5b1c8837975928cacce291014b94", @generic="9f441847c0fed41ec34c20872744db4480138c9b7c11911cc094915892bc003ecf026e4b5eac1d02bdfdf71b2a017e1d8efd0727a0ddf42ba4f0815997a3770793078ee43df43983e1b5cdcc3fd08eec141225437f30cf3e2da7d578dfbc57a7e856ffa2d49197376ea684c30cf286997ba42fc6b02e84fe160c7ef4918d1f97aa0027", @generic="7dbbdf0ed378d1cb96061b77006c13595b7468e77657abeaa7847488b9ef37bb313e8d7c8c9d89b24f95ab6877b203d94f0d7454c957e4209d0f4a05a33ef3ec8dd12a150706167c9a58f5ed0390b477d8bce523ba2a738959e3ea9eccbde082d871243d3be131a65a509d2ba54848b1334c44016316951e185a0459fa411993bc05d23d3c5865a1e8f7a583eb6c"]}]}, 0x2f4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 2.976495116s ago: executing program 0 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x40000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xc3, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa10810010000800450000b100000000fb01"], 0x0) 2.76110415s ago: executing program 0 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0002802c00018014000300200174e500000000000000000000000214000400fe8000000000000000000000000000bb0c000280050001"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000008010800e2ffffff0000000a0000030900010073797a05000000213a0000000000da0ad84400000000000000b9247bd61093cdd83c105303653f68c9929ff1116dd8a79725e60066346e99d7862da5bdca116643f04183ac51024d290b7628d35cb9ea52ae4ee96cd56af3fd3af6a9d11208fa0d3bae430dfa7bbf19d825e25b2ff4d09996dccfeafeae336d62594e0165784d0721f44c1a801eb121a751e1505f237040cfde12be3684ea7eb161efc4c4c0d46c3b0cd93e6768bc93d9e6e87eb9e46fb08cef6b17ebede03549ed91ef24b5763d3a3cd95a0e741a125e383217605bd6d1ab65c0be1807324359747e53b10afda7d91f4ec2653e6301542af3f367ad4a7b048263cd76ffddf3411bf4fe1507108041c3763f0e74dc0bdba2867e42decee68c6d02ca2f19d605"], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a220000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={r6}, 0x4) symlinkat(&(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x8, 0x0) lsetxattr$security_capability(&(0x7f0000001600)='./file1\x00', &(0x7f0000001640), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000016c0)='./file0/file2\x00', 0x1000) sendmsg$inet(r5, &(0x7f0000001700)={&(0x7f0000001740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001780)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000017c0)={r5}) r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) 1.288707581s ago: executing program 2 (id=221): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x0) write$FUSE_ATTR(r1, &(0x7f0000002640)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x1, 0xa, 0xffffffffffff936a, 0x40, 0x6, 0x6, 0x357, 0x2, 0x6, 0x0, 0x562a, 0xee00, 0x0, 0x8bfffffd, 0x223b8fb9}}}, 0x78) 470.741234ms ago: executing program 1 (id=222): openat(0xffffffffffffff9c, 0x0, 0x400, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0x0, 0xfa11, 0xac}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x220001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r1, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@mcast2, @local, 0x12, 0x15}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c8c4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x8000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0x420}) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 135.965049ms ago: executing program 4 (id=223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x400, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x220001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r2, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@mcast2, @local, 0x12, 0x15}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmmsg$inet(r1, 0x0, 0x0, 0x2400c8c4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x8000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0x420}) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 51.36763ms ago: executing program 2 (id=224): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003e40), 0x0) read(r1, &(0x7f0000003e80)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000003f80)={0x335, @tick=0xe, 0x52}) tkill(r0, 0x7) 0s ago: executing program 5 (id=225): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r1, 0x2cb25000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) kernel console output (not intermixed with test programs): [ 48.132484][ T29] audit: type=1400 audit(1793990265.212:103): avc: denied { write } for pid=5439 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.303650][ T29] audit: type=1400 audit(1793990265.382:104): avc: denied { write } for pid=5439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.382962][ T29] audit: type=1400 audit(1793990265.462:105): avc: denied { write } for pid=5453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.665723][ T29] audit: type=1400 audit(1793990266.752:106): avc: denied { transition } for pid=5462 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.665865][ T29] audit: type=1400 audit(1793990266.752:107): avc: denied { noatsecure } for pid=5462 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.668166][ T29] audit: type=1400 audit(1793990266.752:108): avc: denied { write } for pid=5462 comm="sh" path="pipe:[5164]" dev="pipefs" ino=5164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 49.668334][ T29] audit: type=1400 audit(1793990266.752:109): avc: denied { rlimitinh } for pid=5462 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.668470][ T29] audit: type=1400 audit(1793990266.752:110): avc: denied { siginh } for pid=5462 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.989182][ T29] audit: type=1400 audit(1793990269.072:111): avc: denied { write } for pid=5471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.057606][ T29] audit: type=1400 audit(1793990269.142:112): avc: denied { write } for pid=5482 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.279560][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 53.279578][ T29] audit: type=1400 audit(1793990270.362:123): avc: denied { write } for pid=5555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.350804][ T29] audit: type=1400 audit(1793990270.432:124): avc: denied { write } for pid=5566 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.534685][ T29] audit: type=1400 audit(1793990270.622:125): avc: denied { write } for pid=5569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.587010][ T29] audit: type=1400 audit(1793990270.672:126): avc: denied { write } for pid=5580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.773280][ T29] audit: type=1400 audit(1793990270.852:127): avc: denied { write } for pid=5583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.821837][ T29] audit: type=1400 audit(1793990270.902:128): avc: denied { write } for pid=5594 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 59.672013][ T29] audit: type=1400 audit(1793990276.752:129): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.673272][ T29] audit: type=1400 audit(1793990276.752:130): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.677655][ T5606] cgroup: Unknown subsys name 'net' [ 59.679877][ T29] audit: type=1400 audit(1793990276.762:131): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.826720][ T5606] cgroup: Unknown subsys name 'cpuset' [ 59.835460][ T5606] cgroup: Unknown subsys name 'rlimit' [ 59.935185][ T29] audit: type=1400 audit(1793990277.012:132): avc: denied { setattr } for pid=5606 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.935519][ T29] audit: type=1400 audit(1793990277.022:133): avc: denied { create } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.935717][ T29] audit: type=1400 audit(1793990277.022:134): avc: denied { write } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.936006][ T29] audit: type=1400 audit(1793990277.022:135): avc: denied { read } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.996387][ T29] audit: type=1400 audit(1793990277.082:136): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.996430][ T29] audit: type=1400 audit(1793990277.082:137): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.096944][ T5610] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.097913][ T29] audit: type=1400 audit(1793990277.182:138): avc: denied { relabelto } for pid=5610 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.034704][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.096672][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.096953][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.097665][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.098313][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.098719][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.099833][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.100228][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.102399][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.102645][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.103632][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.104113][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.104706][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.105009][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.105657][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.106026][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.113006][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.113089][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.117039][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.118698][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.119030][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.119533][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.120117][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.120537][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.121091][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.122760][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.834137][ T5629] rdma_rxe: Failed to create IPv6 UDP tunnel [ 63.840407][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.841017][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.846819][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.971993][ T5619] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.999924][ T5617] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 64.091565][ T5616] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 64.139861][ T5618] infiniband rxe0: set active [ 64.140386][ T5618] infiniband rxe0: added rxe_eth0 [ 64.164864][ T5354] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.172123][ T5618] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 64.172156][ T5618] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 64.172192][ T5618] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 64.199917][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.259141][ T5618] RDS/IB: rxe0: added [ 64.259375][ T5618] smc: adding ib device rxe0 with port count 1 [ 64.259434][ T5618] smc: ib device rxe0 port 1 has no pnetid [ 64.298125][ T5354] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.481093][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.619736][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.620389][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.620490][ T5629] bridge_slave_0: entered allmulticast mode [ 64.621863][ T5629] bridge_slave_0: entered promiscuous mode [ 64.653847][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.653914][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.653993][ T5629] bridge_slave_1: entered allmulticast mode [ 64.657792][ T5629] bridge_slave_1: entered promiscuous mode [ 64.707919][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.741692][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.787619][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.807921][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.808001][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.808091][ T5617] bridge_slave_0: entered allmulticast mode [ 64.809628][ T5617] bridge_slave_0: entered promiscuous mode [ 64.850056][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.850175][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.850270][ T5619] bridge_slave_0: entered allmulticast mode [ 64.853468][ T5619] bridge_slave_0: entered promiscuous mode [ 64.879964][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.880032][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.880300][ T5617] bridge_slave_1: entered allmulticast mode [ 64.882007][ T5617] bridge_slave_1: entered promiscuous mode [ 64.891829][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.893368][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.893434][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.893672][ T5619] bridge_slave_1: entered allmulticast mode [ 64.896774][ T5619] bridge_slave_1: entered promiscuous mode [ 64.946980][ T5629] team0: Port device team_slave_0 added [ 64.977267][ T5629] team0: Port device team_slave_1 added [ 64.980144][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.019376][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.022209][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.029824][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.029837][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.029856][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.034842][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.034855][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.034874][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.102911][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.131618][ T5622] Bluetooth: hci1: command tx timeout [ 65.139394][ T5617] team0: Port device team_slave_0 added [ 65.143430][ T5617] team0: Port device team_slave_1 added [ 65.205003][ T5621] Bluetooth: hci2: command tx timeout [ 65.205139][ T5621] Bluetooth: hci0: command tx timeout [ 65.205198][ T5621] Bluetooth: hci4: command tx timeout [ 65.205359][ T5622] Bluetooth: hci3: command tx timeout [ 65.209944][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.209954][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.209968][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.225235][ T5619] team0: Port device team_slave_0 added [ 65.227245][ T5619] team0: Port device team_slave_1 added [ 65.236506][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.236522][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.236541][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.241650][ T5629] hsr_slave_0: entered promiscuous mode [ 65.242354][ T5629] hsr_slave_1: entered promiscuous mode [ 65.244003][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.344559][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.344573][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.344592][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.377063][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.377078][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.377097][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.522058][ T5617] hsr_slave_0: entered promiscuous mode [ 65.522484][ T5617] hsr_slave_1: entered promiscuous mode [ 65.522780][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 65.522793][ T5617] Cannot create hsr debugfs directory [ 65.541731][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.542895][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.543012][ T5616] bridge_slave_0: entered allmulticast mode [ 65.544098][ T5616] bridge_slave_0: entered promiscuous mode [ 65.574581][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.574693][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.576291][ T5616] bridge_slave_1: entered allmulticast mode [ 65.577334][ T5616] bridge_slave_1: entered promiscuous mode [ 65.588452][ T5619] hsr_slave_0: entered promiscuous mode [ 65.589148][ T5619] hsr_slave_1: entered promiscuous mode [ 65.589589][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 65.589600][ T5619] Cannot create hsr debugfs directory [ 65.661164][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.688993][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.762356][ T5616] team0: Port device team_slave_0 added [ 65.795048][ T5616] team0: Port device team_slave_1 added [ 65.844896][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.844912][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.844933][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.860579][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.860593][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.860612][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.940207][ T5616] hsr_slave_0: entered promiscuous mode [ 65.940900][ T5616] hsr_slave_1: entered promiscuous mode [ 65.941378][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 65.941391][ T5616] Cannot create hsr debugfs directory [ 65.964209][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.979797][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.980466][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.992807][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.006363][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.006415][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.019838][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.029395][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.031513][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.041584][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.174092][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.174188][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.174512][ T5618] bridge_slave_0: entered allmulticast mode [ 66.175669][ T5618] bridge_slave_0: entered promiscuous mode [ 66.177643][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.177708][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.178324][ T5618] bridge_slave_1: entered allmulticast mode [ 66.179412][ T5618] bridge_slave_1: entered promiscuous mode [ 66.232347][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.234088][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.237581][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.244097][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.247457][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.265143][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.276459][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.277078][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.288540][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.290828][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.327125][ T5618] team0: Port device team_slave_0 added [ 66.329482][ T5618] team0: Port device team_slave_1 added [ 66.367235][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.367252][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.367273][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.378872][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.378886][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.378905][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.476275][ T5618] hsr_slave_0: entered promiscuous mode [ 66.476945][ T5618] hsr_slave_1: entered promiscuous mode [ 66.477493][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 66.477507][ T5618] Cannot create hsr debugfs directory [ 66.477743][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.480353][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.481061][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.483141][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.484010][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.492138][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.528446][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.537964][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.636016][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.652725][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.655991][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.656545][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.663843][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.665118][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.671224][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.704543][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.706405][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.757081][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.800800][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.800884][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.826569][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.826647][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.850026][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.865698][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.869734][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.870862][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.873114][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.874016][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.883867][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.898274][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.906924][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.914213][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.954055][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.963533][ T5629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.963552][ T5629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.977102][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.000898][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.001042][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.001971][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.002012][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.003432][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.003472][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.039648][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.039723][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.090937][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.158667][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.172978][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.173062][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.204967][ T5622] Bluetooth: hci1: command tx timeout [ 67.212681][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.212752][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.284693][ T4938] Bluetooth: hci4: command tx timeout [ 67.284721][ T4938] Bluetooth: hci0: command tx timeout [ 67.284740][ T4938] Bluetooth: hci2: command tx timeout [ 67.284936][ T5622] Bluetooth: hci3: command tx timeout [ 67.353169][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.432066][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.455962][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.456079][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.491273][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.491359][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.899831][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.988362][ T5629] veth0_vlan: entered promiscuous mode [ 67.992023][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.039565][ T5629] veth1_vlan: entered promiscuous mode [ 68.168394][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.179252][ T5619] veth0_vlan: entered promiscuous mode [ 68.182504][ T5629] veth0_macvtap: entered promiscuous mode [ 68.193674][ T5629] veth1_macvtap: entered promiscuous mode [ 68.210923][ T5619] veth1_vlan: entered promiscuous mode [ 68.241522][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.268118][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.318447][ T5619] veth0_macvtap: entered promiscuous mode [ 68.338670][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.338782][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.338812][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.338841][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.344877][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.346547][ T5619] veth1_macvtap: entered promiscuous mode [ 68.389979][ T5617] veth0_vlan: entered promiscuous mode [ 68.412900][ T5617] veth1_vlan: entered promiscuous mode [ 68.430416][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.451309][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.496949][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.527545][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.527565][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.549189][ T1125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.558848][ T5617] veth0_macvtap: entered promiscuous mode [ 68.571001][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.578813][ T5617] veth1_macvtap: entered promiscuous mode [ 68.620725][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.620744][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.658585][ T5616] veth0_vlan: entered promiscuous mode [ 68.671480][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.696483][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 68.696500][ T29] audit: type=1400 audit(1793990285.782:159): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.Yvcexh/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.700693][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.703436][ T5616] veth1_vlan: entered promiscuous mode [ 68.742291][ T29] audit: type=1400 audit(1793990285.812:160): avc: denied { mount } for pid=5629 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.769642][ T29] audit: type=1400 audit(1793990285.852:161): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.Yvcexh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.785794][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785858][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785885][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785913][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785940][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785967][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.799250][ T29] audit: type=1400 audit(1793990285.872:162): avc: denied { mount } for pid=5629 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.808877][ T29] audit: type=1400 audit(1793990285.882:163): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.Yvcexh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.814387][ T29] audit: type=1400 audit(1793990285.892:164): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.Yvcexh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.829930][ T29] audit: type=1400 audit(1793990285.912:165): avc: denied { unmount } for pid=5629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.846864][ T29] audit: type=1400 audit(1793990285.932:166): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.850385][ T29] audit: type=1400 audit(1793990285.932:167): avc: denied { mount } for pid=5629 comm="syz-executor" name="/" dev="gadgetfs" ino=8272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.942059][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.942079][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.998187][ T29] audit: type=1400 audit(1793990286.082:168): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 69.017606][ T5616] veth0_macvtap: entered promiscuous mode [ 69.054378][ T5616] veth1_macvtap: entered promiscuous mode [ 69.057349][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.089701][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.089721][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.104349][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.104366][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.143831][ T5618] veth0_vlan: entered promiscuous mode [ 69.183119][ T5813] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.183198][ T5813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.213627][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.213648][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.219749][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.231609][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.240710][ T5618] veth1_vlan: entered promiscuous mode [ 69.284733][ T5622] Bluetooth: hci1: command tx timeout [ 69.285285][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.364799][ T5621] Bluetooth: hci2: command tx timeout [ 69.364834][ T5621] Bluetooth: hci0: command tx timeout [ 69.364853][ T5621] Bluetooth: hci4: command tx timeout [ 69.364964][ T5622] Bluetooth: hci3: command tx timeout [ 69.430828][ T5618] veth0_macvtap: entered promiscuous mode [ 69.435136][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.435469][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.435585][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.441431][ T5618] veth1_macvtap: entered promiscuous mode [ 69.570842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.570860][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.590544][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.630747][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.713302][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.713330][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.763012][ T5622] Bluetooth: hci3: unexpected subevent 0x0e length: 12 < 15 [ 69.856145][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.158658][ T5840] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.187126][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.189052][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.193329][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.346623][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.346638][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.371001][ T5622] Bluetooth: hci1: command tx timeout [ 71.445202][ T5621] Bluetooth: hci0: command tx timeout [ 71.445234][ T5621] Bluetooth: hci2: command tx timeout [ 71.445268][ T4938] Bluetooth: hci4: command tx timeout [ 71.445296][ T5622] Bluetooth: hci3: command tx timeout [ 71.465465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.465482][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.791277][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 73.791314][ T29] audit: type=1400 audit(1793990288.892:199): avc: denied { read } for pid=5852 comm="syz.3.13" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.791533][ T29] audit: type=1400 audit(1793990288.892:200): avc: denied { open } for pid=5852 comm="syz.3.13" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.846536][ T29] audit: type=1400 audit(1793990290.922:201): avc: denied { create } for pid=5854 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.846661][ T29] audit: type=1400 audit(1793990290.922:202): avc: denied { read } for pid=5854 comm="syz.1.14" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.846775][ T29] audit: type=1400 audit(1793990290.922:203): avc: denied { open } for pid=5854 comm="syz.1.14" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.846901][ T29] audit: type=1400 audit(1793990290.932:204): avc: denied { ioctl } for pid=5854 comm="syz.1.14" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.903039][ T5863] 9p: Bad value for 'wfdno' [ 73.903749][ T29] audit: type=1400 audit(1793990290.982:205): avc: denied { create } for pid=5854 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.903940][ T29] audit: type=1400 audit(1793990290.982:206): avc: denied { mounton } for pid=5854 comm="syz.1.14" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.632319][ T29] audit: type=1400 audit(1793990291.712:207): avc: denied { write } for pid=5867 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.632364][ T29] audit: type=1400 audit(1793990291.712:208): avc: denied { nlmsg_write } for pid=5867 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.006306][ T5760] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.016628][ T5881] tipc: Started in network mode [ 75.016643][ T5881] tipc: Node identity 4, cluster identity 4711 [ 75.016650][ T5881] tipc: Node number set to 4 [ 75.464340][ T5760] usb 2-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 76.505090][ T5760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.505301][ T5760] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 76.505361][ T5760] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 76.505525][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.109518][ T5760] snd-ua101 2-1:1.0: invalid num_altsetting [ 77.188675][ T967] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.811994][ T5760] usb 2-1: USB disconnect, device number 2 [ 78.470769][ T5893] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19'. [ 78.997604][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.051871][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.089320][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 79.089348][ T29] audit: type=1400 audit(1793990296.172:234): avc: denied { read write } for pid=5892 comm="syz.0.20" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.102990][ T29] audit: type=1400 audit(1793990296.182:235): avc: denied { open } for pid=5892 comm="syz.0.20" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.106122][ T5893] bond0 (unregistering): Released all slaves [ 79.685124][ T29] audit: type=1400 audit(1793990296.772:236): avc: denied { read append } for pid=5900 comm="syz.2.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.765858][ T29] audit: type=1400 audit(1793990296.802:237): avc: denied { open } for pid=5900 comm="syz.2.22" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.808146][ T29] audit: type=1400 audit(1793990296.892:238): avc: denied { read write } for pid=5900 comm="syz.2.22" name="video5" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.834304][ T29] audit: type=1400 audit(1793990296.892:239): avc: denied { open } for pid=5900 comm="syz.2.22" path="/dev/video5" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.841243][ T29] audit: type=1400 audit(1793990296.922:240): avc: denied { setopt } for pid=5899 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.869850][ T29] audit: type=1400 audit(1793990296.952:241): avc: denied { ioctl } for pid=5899 comm="syz.1.21" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.684333][ T5896] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.708279][ T10] cfg80211: failed to load regulatory.db [ 82.800460][ T29] audit: type=1400 audit(1793990299.882:242): avc: denied { write } for pid=5886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.840656][ T29] audit: type=1400 audit(1793990299.922:243): avc: denied { add_name } for pid=5886 comm="dhcpcd-run-hook" name="resolv.conf.rxe_eth0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.444659][ T5926] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 83.796579][ T5927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.567742][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 84.567791][ T29] audit: type=1400 audit(1793990301.652:253): avc: denied { connect } for pid=5916 comm="syz.0.26" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.794359][ T29] audit: type=1400 audit(1793990301.792:254): avc: denied { setopt } for pid=5933 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.794464][ T29] audit: type=1400 audit(1793990301.792:255): avc: denied { write } for pid=5933 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.005560][ T29] audit: type=1400 audit(1793990302.092:256): avc: denied { write } for pid=5916 comm="syz.0.26" path="socket:[8081]" dev="sockfs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.063460][ T29] audit: type=1400 audit(1793990302.142:257): avc: denied { name_bind } for pid=5916 comm="syz.0.26" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.197344][ T29] audit: type=1400 audit(1793990303.262:258): avc: denied { create } for pid=5938 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.225086][ T29] audit: type=1400 audit(1793990303.312:259): avc: denied { accept } for pid=5938 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 86.226370][ T29] audit: type=1400 audit(1793990303.312:260): avc: denied { unmount } for pid=5629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.298050][ T5799] dummy0: entered promiscuous mode [ 86.308447][ T29] audit: type=1400 audit(1793990303.392:261): avc: denied { create } for pid=5946 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.311531][ T29] audit: type=1400 audit(1793990303.392:262): avc: denied { connect } for pid=5946 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.794438][ T5743] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.957435][ T5743] usb 4-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 87.047042][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 87.054588][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.054618][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 87.199578][ T5956] tmpfs: Using encoding : utf8-12.1.0 [ 87.266882][ T5799] Process accounting resumed [ 87.276043][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.276068][ T5743] usb 4-1: Product: syz [ 87.276081][ T5743] usb 4-1: Manufacturer: syz [ 87.276093][ T5743] usb 4-1: SerialNumber: syz [ 87.322656][ T5743] usb 4-1: config 0 descriptor?? [ 87.619309][ T5960] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.661549][ T5743] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 88.419708][ T10] usb 4-1: USB disconnect, device number 2 [ 89.927088][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 89.927110][ T29] audit: type=1400 audit(1793990307.012:274): avc: denied { create } for pid=5976 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.202829][ T29] audit: type=1400 audit(1793990307.282:275): avc: denied { write } for pid=5979 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.257874][ T5980] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.390589][ T29] audit: type=1400 audit(1793990307.472:276): avc: denied { map_create } for pid=5983 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.411661][ T29] audit: type=1400 audit(1793990307.472:277): avc: denied { map_read map_write } for pid=5983 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.411707][ T29] audit: type=1400 audit(1793990307.472:278): avc: denied { prog_load } for pid=5983 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.432014][ T29] audit: type=1400 audit(1793990307.522:279): avc: denied { read } for pid=5982 comm="syz.1.41" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.479819][ T29] audit: type=1400 audit(1793990307.562:280): avc: denied { open } for pid=5982 comm="syz.1.41" path="/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.577064][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.578286][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.578840][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.579143][ T29] audit: type=1400 audit(1793990307.662:281): avc: denied { ioctl } for pid=5990 comm="syz.0.44" path="/dev/radio3" dev="devtmpfs" ino=967 ioctlcmd=0x40445637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.579866][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.581575][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.831026][ T29] audit: type=1400 audit(1793990307.912:282): avc: denied { prog_run } for pid=6006 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.872812][ T29] audit: type=1400 audit(1793990307.952:283): avc: denied { write } for pid=6012 comm="syz.1.53" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 91.700993][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.776917][ T6033] IPVS: length: 172 != 24 [ 91.785719][ T5992] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.934851][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.110904][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.295525][ T5743] hid-sensor-hub 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 92.345049][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.586921][ T6058] fido_id[6058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.644381][ T5622] Bluetooth: hci5: command tx timeout [ 94.611155][ T1144] bridge_slave_1: left allmulticast mode [ 94.611190][ T1144] bridge_slave_1: left promiscuous mode [ 94.611832][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.660706][ T1144] bridge_slave_0: left allmulticast mode [ 94.660731][ T1144] bridge_slave_0: left promiscuous mode [ 94.660910][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.724823][ T5622] Bluetooth: hci5: command tx timeout [ 94.740928][ T6078] SELinux: policydb version 1103820993 does not match my version range 15-35 [ 94.741487][ T6078] SELinux: failed to load policy [ 95.116694][ T6095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.76'. [ 95.133653][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 95.133668][ T29] audit: type=1400 audit(1793990312.202:334): avc: denied { write } for pid=6079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.164637][ T29] audit: type=1400 audit(1793990312.222:335): avc: denied { read } for pid=6090 comm="syz.4.77" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.273942][ T29] audit: type=1400 audit(1793990312.352:336): avc: denied { write } for pid=6097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.421187][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.523797][ T29] audit: type=1400 audit(1793990312.582:337): avc: denied { write } for pid=6101 comm="syz.0.80" name="ss" dev="configfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.610596][ T29] audit: type=1400 audit(1793990312.682:338): avc: denied { write } for pid=6101 comm="syz.0.80" name="c.1" dev="configfs" ino=10398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.644290][ T29] audit: type=1400 audit(1793990312.722:339): avc: denied { write } for pid=6101 comm="syz.0.80" name="c.1" dev="configfs" ino=10398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.767420][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.806937][ T6109] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 95.812099][ T1144] bond0 (unregistering): Released all slaves [ 96.458756][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.540468][ T29] audit: type=1400 audit(1793990313.622:340): avc: denied { read write } for pid=6113 comm="syz.0.84" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 96.540738][ T29] audit: type=1400 audit(1793990313.622:341): avc: denied { open } for pid=6113 comm="syz.0.84" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 96.656499][ T29] audit: type=1400 audit(1793990313.742:342): avc: denied { bind } for pid=6117 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.666923][ T6118] Bluetooth: MGMT ver 1.23 [ 96.677708][ T29] audit: type=1400 audit(1793990313.742:343): avc: denied { write } for pid=6117 comm="syz.4.86" path="socket:[10655]" dev="sockfs" ino=10655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.804931][ T5622] Bluetooth: hci5: command tx timeout [ 98.070980][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.071061][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.071157][ T5992] bridge_slave_0: entered allmulticast mode [ 98.090497][ T5992] bridge_slave_0: entered promiscuous mode [ 98.188970][ T1144] hsr_slave_0: left promiscuous mode [ 98.193296][ T6158] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 98.197070][ T1144] hsr_slave_1: left promiscuous mode [ 98.204126][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.204151][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.242484][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.242503][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.320528][ T1144] veth1_macvtap: left promiscuous mode [ 98.320573][ T1144] veth0_macvtap: left promiscuous mode [ 98.320686][ T1144] veth1_vlan: left promiscuous mode [ 98.320753][ T1144] veth0_vlan: left promiscuous mode [ 99.594911][ T5622] Bluetooth: hci5: command tx timeout [ 101.197182][ T6198] xt_IDLETIMER: label is empty or not nul-terminated [ 101.268919][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 101.287089][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 101.337174][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 101.337192][ T29] audit: type=1400 audit(1793990318.422:370): avc: denied { create } for pid=6199 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.338764][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 101.401556][ T29] audit: type=1400 audit(1793990318.482:371): avc: denied { create } for pid=6199 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.431737][ T29] audit: type=1400 audit(1793990318.492:372): avc: denied { write } for pid=6199 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.483617][ T29] audit: type=1400 audit(1793990318.552:373): avc: denied { ioctl } for pid=6199 comm="syz.2.107" path="socket:[10789]" dev="sockfs" ino=10789 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.756320][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.856020][ T5354] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.915405][ T9] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 101.918023][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.918160][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.918204][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.918232][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.918324][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.076709][ T5354] usb 2-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 102.079192][ T5354] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 102.130821][ T5354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.130923][ T5354] usb 2-1: Product: syz [ 102.130961][ T5354] usb 2-1: Manufacturer: syz [ 102.131041][ T5354] usb 2-1: SerialNumber: syz [ 102.668456][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.670042][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.670668][ T5992] bridge_slave_1: entered allmulticast mode [ 102.706098][ T5354] scsi host1: uas [ 102.732821][ T5992] bridge_slave_1: entered promiscuous mode [ 102.793566][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.014717][ T5354] usb 2-1: USB disconnect, device number 3 [ 103.713148][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.736559][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.799886][ T5743] usb 3-1: USB disconnect, device number 2 [ 103.803077][ T5992] team0: Port device team_slave_0 added [ 103.833701][ T5992] team0: Port device team_slave_1 added [ 103.932312][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.932329][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.932350][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.937346][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.937359][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.937391][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.062168][ T5992] hsr_slave_0: entered promiscuous mode [ 104.062931][ T5992] hsr_slave_1: entered promiscuous mode [ 104.066913][ T5992] debugfs: 'hsr0' already exists in 'hsr' [ 104.066926][ T5992] Cannot create hsr debugfs directory [ 104.134309][ T44] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.288749][ T44] usb 5-1: New USB device found: idVendor=046d, idProduct=c298, bcdDevice=0.00 [ 104.293719][ T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 104.293754][ T44] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.293776][ T44] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 104.293798][ T44] usb 5-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 104.293818][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.293844][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.299203][ T44] usb 5-1: config 0 descriptor?? [ 104.300512][ T6212] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.514025][ T29] audit: type=1400 audit(1793990321.592:374): avc: denied { write } for pid=6213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.543594][ T5992] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.553836][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.564011][ T5992] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.576592][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.577575][ T5992] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.580145][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.581018][ T5992] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.584696][ T967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.623702][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.710237][ T29] audit: type=1400 audit(1793990321.792:375): avc: denied { write } for pid=6231 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.736359][ T44] logitech 0003:046D:C298.0002: unknown main item tag 0x2 [ 104.736394][ T44] logitech 0003:046D:C298.0002: unknown main item tag 0x0 [ 104.736414][ T44] logitech 0003:046D:C298.0002: unknown main item tag 0x0 [ 104.737129][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 104.740628][ T967] usb 2-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.743844][ T967] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.743869][ T967] usb 2-1: config 0 has no interface number 0 [ 104.743902][ T967] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.743922][ T967] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.743944][ T967] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.743967][ T967] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.744003][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.750343][ T967] usb 2-1: config 0 descriptor?? [ 104.770600][ T44] input: HID 046d:c298 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C298.0002/input/input6 [ 104.771524][ T44] logitech 0003:046D:C298.0002: offset (39) exceeds report_count (19) [ 104.771607][ T44] logitech 0003:046D:C298.0002: offset (25) exceeds report_count (19) [ 104.786739][ T967] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.925553][ T5799] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.927894][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.944374][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.002614][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.018515][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.018582][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.041195][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.041267][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.069084][ T44] logitech 0003:046D:C298.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 105.069556][ T44] logitech 0003:046D:C298.0002: implement() called with too large value 245 (n: 0)! (kworker/1:1) [ 105.087391][ T44] logitech 0003:046D:C298.0002: implement() called with too large value 248 (n: 0)! (kworker/1:1) [ 105.087420][ T44] logitech 0003:046D:C298.0002: implement() called with too large value 3 (n: 0)! (kworker/1:1) [ 105.087599][ T44] logitech 0003:046D:C298.0002: implement() called with too large value 129 (n: 0)! (kworker/1:1) [ 105.087619][ T44] logitech 0003:046D:C298.0002: implement() called with too large value 11 (n: 0)! (kworker/1:1) [ 105.088477][ T44] logitech 0003:046D:C298.0002: Force feedback support for Logitech Gaming Wheels [ 105.092166][ T5799] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 105.114516][ T5799] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 105.114586][ T5799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.114602][ T5799] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.114619][ T5799] usb 3-1: config 1 has no interface number 0 [ 105.114658][ T5799] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 105.114685][ T5799] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 105.131380][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.131404][ T5799] usb 3-1: Product: syz [ 105.131418][ T5799] usb 3-1: Manufacturer: syz [ 105.131429][ T5799] usb 3-1: SerialNumber: syz [ 105.144741][ T44] usb 5-1: USB disconnect, device number 2 [ 105.436492][ T6242] fido_id[6242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 105.631402][ T29] audit: type=1400 audit(1793990322.712:376): avc: denied { write } for pid=6244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.732184][ T5799] usb 3-1: USB disconnect, device number 3 [ 105.774989][ T29] audit: type=1400 audit(1793990322.862:377): avc: denied { write } for pid=6258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.818918][ T29] audit: type=1400 audit(1793990322.902:378): avc: denied { create } for pid=6259 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.844317][ T29] audit: type=1400 audit(1793990322.922:379): avc: denied { bind } for pid=6259 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.907115][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 106.204075][ T6282] atomic_op ffff8880288761e0 conn xmit_atomic 0000000000000000 [ 106.417097][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'. [ 106.814680][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.846982][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.977939][ T9] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 106.996072][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.996218][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.996270][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.996362][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.008747][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.147132][ T10] usb 2-1: USB disconnect, device number 4 [ 107.420376][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 109.106814][ T5722] usb 3-1: USB disconnect, device number 4 [ 109.142866][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 109.142883][ T29] audit: type=1400 audit(1793990326.222:382): avc: denied { read write } for pid=6317 comm="syz.0.127" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.143123][ T29] audit: type=1400 audit(1793990326.222:383): avc: denied { open } for pid=6317 comm="syz.0.127" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.215320][ T29] audit: type=1400 audit(1793990326.302:384): avc: denied { ioctl } for pid=6317 comm="syz.0.127" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.313910][ T29] audit: type=1400 audit(1793990326.392:385): avc: denied { getopt } for pid=6326 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.417217][ T6334] netlink: 255 bytes leftover after parsing attributes in process `syz.0.132'. [ 109.436608][ T5992] veth0_vlan: entered promiscuous mode [ 109.442719][ T5992] veth1_vlan: entered promiscuous mode [ 109.471811][ T5992] veth0_macvtap: entered promiscuous mode [ 109.475671][ T5992] veth1_macvtap: entered promiscuous mode [ 109.486925][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.499436][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.529537][ T29] audit: type=1400 audit(1793990326.612:386): avc: denied { append } for pid=6335 comm="syz.0.133" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 109.574029][ T6339] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.588484][ T153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.588778][ T153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.588809][ T153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.588836][ T153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.652490][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.652512][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.701559][ T6341] Bluetooth: hci0: Invalid link address type 20 for 66:55:44:33:22:11 [ 109.752766][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.752787][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.893894][ T29] audit: type=1400 audit(1793990326.972:387): avc: denied { unlink } for pid=6344 comm="syz.2.136" name="#3" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.034518][ T29] audit: type=1400 audit(1793990327.112:388): avc: denied { write } for pid=6345 comm="syz.1.137" name="ss" dev="configfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.042464][ T29] audit: type=1400 audit(1793990327.122:389): avc: denied { write } for pid=6345 comm="syz.1.137" name="c.1" dev="configfs" ino=10398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.043478][ T29] audit: type=1400 audit(1793990327.122:390): avc: denied { write } for pid=6345 comm="syz.1.137" name="c.1" dev="configfs" ino=10398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.134930][ T6323] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 110.394152][ T6349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.136'. [ 110.487556][ T6349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.661519][ T6349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.729100][ T6349] bond0 (unregistering): Released all slaves [ 111.052164][ T29] audit: type=1400 audit(1793990328.132:391): avc: denied { create } for pid=6352 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.215016][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.40'. [ 114.091296][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.275716][ T9] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 114.277948][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.278055][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.278100][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.278146][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.278219][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.385299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 114.694585][ T9] usb 6-1: can't set config #1, error -71 [ 114.719458][ T9] usb 6-1: USB disconnect, device number 2 [ 114.762815][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 114.762834][ T29] audit: type=1326 audit(1793990331.842:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.802461][ T29] audit: type=1326 audit(1793990331.882:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.831881][ T29] audit: type=1326 audit(1793990331.922:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.865279][ T29] audit: type=1326 audit(1793990331.922:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.865492][ T29] audit: type=1326 audit(1793990331.952:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.865985][ T29] audit: type=1326 audit(1793990331.952:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.866394][ T29] audit: type=1326 audit(1793990331.952:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde3e16034e code=0x7ffc0000 [ 114.901201][ T29] audit: type=1326 audit(1793990331.952:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.901249][ T29] audit: type=1326 audit(1793990331.992:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 114.954680][ T29] audit: type=1326 audit(1793990332.012:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.1.144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 116.905260][ T6405] netlink: 14 bytes leftover after parsing attributes in process `syz.5.153'. [ 116.967677][ T6405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.021952][ T6405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.054892][ T6405] bond0 (unregistering): Released all slaves [ 117.286716][ T5799] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 117.540552][ T5799] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.540693][ T5799] usb 5-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 117.578465][ T5799] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 117.578536][ T5799] usb 5-1: config 142 descriptor has 1 excess byte, ignoring [ 117.578579][ T5799] usb 5-1: config 142 has no interface number 0 [ 117.578665][ T5799] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 117.578698][ T5799] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 117.578743][ T5799] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 117.578793][ T5799] usb 5-1: config 142 interface 251 has no altsetting 0 [ 117.741858][ T5799] usb 5-1: string descriptor 0 read error: -22 [ 117.742403][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.887129][ T6406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.887449][ T6406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.936120][ T5799] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 117.962171][ T5799] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 118.364048][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.159'. [ 118.696991][ T6406] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 118.697029][ T6406] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 118.697312][ C1] usb 5-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 118.774344][ T5799] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.925699][ T5799] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 118.943938][ T5799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.955866][ T5799] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.955928][ T5799] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.969819][ T5799] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.969952][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.104146][ T5760] usb 5-1: USB disconnect, device number 3 [ 119.565850][ T5760] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 119.604978][ T5760] cypress_m8 5-1:142.251: device disconnected [ 120.802777][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 120.802795][ T29] audit: type=1400 audit(1793990337.882:417): avc: denied { write } for pid=6411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.870973][ T5799] usb 6-1: USB disconnect, device number 3 [ 120.941977][ T29] audit: type=1400 audit(1793990338.022:418): avc: denied { write } for pid=6435 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.942023][ T29] audit: type=1400 audit(1793990338.022:419): avc: denied { read } for pid=6435 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.128476][ T29] audit: type=1400 audit(1793990338.212:420): avc: denied { write } for pid=6440 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.426017][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.146'. [ 121.581917][ T29] audit: type=1326 audit(1793990338.662:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.1.165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 121.582065][ T29] audit: type=1326 audit(1793990338.662:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.1.165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 121.605305][ T29] audit: type=1326 audit(1793990338.682:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.1.165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 121.605346][ T29] audit: type=1326 audit(1793990338.692:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.1.165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 121.605380][ T29] audit: type=1326 audit(1793990338.692:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.1.165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 121.662067][ T29] audit: type=1326 audit(1793990338.732:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.1.165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 121.914667][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.869520][ T10] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 122.872366][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.872408][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.872431][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.872452][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.872482][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.176176][ T10] usb 1-1: USB disconnect, device number 2 [ 123.504493][ T967] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.582012][ T6487] netlink: 14 bytes leftover after parsing attributes in process `syz.1.168'. [ 123.656802][ T967] usb 6-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.667711][ T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.795679][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.828757][ T967] usb 6-1: config 0 descriptor?? [ 123.901122][ T967] cp210x 6-1:0.0: cp210x converter detected [ 123.903192][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.945069][ T6487] bond0 (unregistering): Released all slaves [ 124.511630][ T5622] Bluetooth: to_multiplier 0 < 10 [ 124.854237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.964240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.431425][ T967] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 125.441862][ T967] usb 6-1: cp210x converter now attached to ttyUSB0 [ 125.534442][ T5722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.657860][ T9] usb 6-1: USB disconnect, device number 4 [ 125.678427][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.678857][ T9] cp210x 6-1:0.0: device disconnected [ 125.694546][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 125.695963][ T5722] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.700256][ T5722] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 125.700293][ T5722] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.700317][ T5722] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.700337][ T5722] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.700356][ T5722] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.700386][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.837450][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 125.837467][ T29] audit: type=1400 audit(1793990342.922:456): avc: denied { write } for pid=6500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.929380][ T5722] usb 3-1: usb_control_msg returned -32 [ 125.929420][ T5722] usbtmc 3-1:16.0: can't read capabilities [ 125.956455][ T5722] usb 3-1: USB disconnect, device number 5 [ 125.971213][ T29] audit: type=1400 audit(1793990343.052:457): avc: denied { write } for pid=6521 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.128675][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 126.564427][ T5622] Bluetooth: hci4: command tx timeout [ 126.574293][ T5722] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.737745][ T5722] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 126.753951][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.766058][ T5722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.766093][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.777325][ T5722] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.777431][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.486919][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.486969][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.252145][ T29] audit: type=1400 audit(1793990345.332:458): avc: denied { create } for pid=6541 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.391496][ T29] audit: type=1400 audit(1793990345.472:459): avc: denied { write } for pid=6541 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.601707][ T9] usb 2-1: USB disconnect, device number 5 [ 128.629323][ T29] audit: type=1400 audit(1793990345.712:460): avc: denied { read } for pid=6546 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.629367][ T29] audit: type=1400 audit(1793990345.712:461): avc: denied { open } for pid=6546 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.629406][ T29] audit: type=1400 audit(1793990345.712:462): avc: denied { getattr } for pid=6546 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.652727][ T29] audit: type=1400 audit(1793990345.732:463): avc: denied { write } for pid=6526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.652776][ T29] audit: type=1400 audit(1793990345.732:464): avc: denied { create } for pid=6526 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.652812][ T29] audit: type=1400 audit(1793990345.732:465): avc: denied { write } for pid=6526 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.883859][ T6553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.188'. [ 128.971706][ T6556] overlayfs: missing 'workdir' [ 129.416578][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 129.869363][ T9] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 130.180272][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.180300][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.180313][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.180333][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.180355][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.424238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.874239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 131.014330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 131.034242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 131.197642][ T967] usb 6-1: USB disconnect, device number 5 [ 131.223049][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 131.223065][ T29] audit: type=1326 audit(1793990348.302:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.223449][ T29] audit: type=1326 audit(1793990348.302:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.300930][ T29] audit: type=1326 audit(1793990348.382:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.300968][ T29] audit: type=1326 audit(1793990348.382:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.301296][ T29] audit: type=1326 audit(1793990348.382:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.357870][ T5722] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.394314][ T29] audit: type=1326 audit(1793990348.472:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.394361][ T29] audit: type=1326 audit(1793990348.472:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.442711][ T29] audit: type=1326 audit(1793990348.522:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5776b6034e code=0x7ffc0000 [ 131.442756][ T29] audit: type=1326 audit(1793990348.522:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.442790][ T29] audit: type=1326 audit(1793990348.522:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.4.179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776b9fb19 code=0x7ffc0000 [ 131.574298][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 131.574815][ T5722] usb 1-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 131.577136][ T5722] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.577455][ T5722] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.580187][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.580208][ T5722] usb 1-1: Product: syz [ 131.580221][ T5722] usb 1-1: Manufacturer: syz [ 131.580501][ T5722] usb 1-1: SerialNumber: syz [ 131.583205][ T5722] usb 1-1: config 0 descriptor?? [ 131.708071][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 131.798744][ T5722] usb 1-1: USB disconnect, device number 3 [ 131.864121][ T6578] FAULT_INJECTION: forcing a failure. [ 131.864121][ T6578] name failslab, interval 1, probability 0, space 0, times 1 [ 131.864150][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.4.194 Not tainted syzkaller #0 PREEMPT(full) [ 131.864173][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 131.864185][ T6578] Call Trace: [ 131.864192][ T6578] [ 131.864202][ T6578] dump_stack_lvl+0x100/0x190 [ 131.864238][ T6578] should_fail_ex.cold+0x5/0xa [ 131.864270][ T6578] should_failslab+0xc2/0x120 [ 131.864294][ T6578] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.864326][ T6578] ? copy_fs_struct+0x49/0x340 [ 131.864353][ T6578] copy_fs_struct+0x49/0x340 [ 131.864378][ T6578] ksys_unshare+0x3a9/0x980 [ 131.864404][ T6578] ? __pfx_ksys_unshare+0x10/0x10 [ 131.864449][ T6578] __x64_sys_unshare+0x31/0x40 [ 131.864475][ T6578] do_syscall_64+0x123/0x790 [ 131.864503][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.864525][ T6578] RIP: 0033:0x7f5776b9fb19 [ 131.864543][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.864561][ T6578] RSP: 002b:00007f57779df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 131.864580][ T6578] RAX: ffffffffffffffda RBX: 00007f5776e25fa0 RCX: 00007f5776b9fb19 [ 131.864593][ T6578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 131.864605][ T6578] RBP: 00007f5776c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.864616][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.864627][ T6578] R13: 00007f5776e26038 R14: 00007f5776e25fa0 R15: 00007ffcb65f04e8 [ 131.864653][ T6578] [ 132.891649][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.196'. [ 133.464320][ T5722] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 133.650967][ T5722] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 133.656810][ T5722] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.656947][ T5722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.657021][ T5722] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.657096][ T5722] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.657200][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.960248][ T5722] usb 6-1: USB disconnect, device number 6 [ 135.376252][ T967] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.424108][ T6602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.197'. [ 135.424124][ T6602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.548005][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 135.550068][ T967] usb 3-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 135.558785][ T967] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 135.558896][ T967] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 135.558978][ T967] usb 3-1: config 0 has no interface number 0 [ 135.559332][ T967] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.559816][ T967] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 135.560027][ T967] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.578208][ T967] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 135.578462][ T967] usb 3-1: Product: syz [ 135.578649][ T967] usb 3-1: Manufacturer: syz [ 135.858557][ T967] usb 3-1: config 0 descriptor?? [ 135.859663][ T6598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.184234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.284228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.404240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 137.327633][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 137.327651][ T29] audit: type=1400 audit(1793990354.412:497): avc: denied { shutdown } for pid=6630 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.390275][ T967] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input7 [ 137.549617][ T6639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.603759][ T5722] usb 3-1: USB disconnect, device number 6 [ 137.603787][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 137.664559][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.734281][ T5730] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 137.818516][ T45] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 137.819392][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.819430][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.821152][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.821171][ T45] usb 5-1: Product: syz [ 137.821185][ T45] usb 5-1: Manufacturer: syz [ 137.821199][ T45] usb 5-1: SerialNumber: syz [ 137.894746][ T5730] usb 2-1: New USB device found: idVendor=1770, idProduct=ff00, bcdDevice=0.00 [ 137.896053][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.896081][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 137.896105][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.896139][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.952239][ T5730] usb 2-1: config 0 descriptor?? [ 137.952876][ T6637] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 138.002552][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 138.082509][ T6648] overlayfs: missing 'lowerdir' [ 138.374313][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.528223][ T45] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 138.544354][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.556089][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.568159][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.568194][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.568237][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.895205][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895235][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895276][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895297][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895317][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895337][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895356][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895376][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895395][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 138.895414][ T5730] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 139.778171][ T45] usb 5-1: USB disconnect, device number 4 [ 140.078739][ T5730] gt683r_led 0003:1770:FF00.0003: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 140.498486][ T5730] usb 2-1: USB disconnect, device number 6 [ 140.522056][ T9] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 140.538417][ T29] audit: type=1400 audit(1793990357.622:498): avc: denied { ioctl } for pid=6649 comm="syz.2.221" path="/dev/sg0" dev="devtmpfs" ino=955 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.599638][ T967] usb 1-1: USB disconnect, device number 4 [ 140.651548][ T6651] fido_id[6651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 140.826434][ T29] audit: type=1326 audit(1793990357.912:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.827248][ T29] audit: type=1326 audit(1793990357.912:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.830786][ T29] audit: type=1326 audit(1793990357.912:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.830829][ T29] audit: type=1326 audit(1793990357.912:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.833012][ T29] audit: type=1326 audit(1793990357.912:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.833287][ T29] audit: type=1326 audit(1793990357.912:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.838001][ T29] audit: type=1326 audit(1793990357.912:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 140.838047][ T29] audit: type=1326 audit(1793990357.922:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3e19fb19 code=0x7ffc0000 [ 141.078245][ T6667] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xa pfn:0x2bff7 [ 141.078264][ T6667] memcg:ffff88807d7a1680 [ 141.078270][ T6667] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 141.078287][ T6667] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 141.078298][ T6667] raw: 000000000000000a 0000000000000000 00000001ffffffff ffff88807d7a1680 [ 141.078305][ T6667] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 141.078313][ T6667] page_owner tracks the page as allocated [ 141.078317][ T6667] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6667, tgid 6664 (syz.5.225), ts 141078216388 [ 141.078337][ T6667] post_alloc_hook+0xfd/0x120 [ 141.078355][ T6667] get_page_from_freelist+0x112f/0x3640 [ 141.078371][ T6667] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 141.078390][ T6667] alloc_pages_mpol+0x201/0x560 [ 141.078404][ T6667] folio_alloc_noprof+0x22/0x250 [ 141.078420][ T6667] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 141.078436][ T6667] filemap_alloc_folio_noprof+0x5e/0x80 [ 141.078450][ T6667] page_cache_ra_order+0x539/0xed0 [ 141.078466][ T6667] filemap_fault+0x1ae2/0x3150 [ 141.078477][ T6667] __do_fault+0x10b/0x440 [ 141.078492][ T6667] do_fault+0xb3f/0x1890 [ 141.078501][ T6667] __handle_mm_fault+0x1858/0x2f40 [ 141.078513][ T6667] handle_mm_fault+0x363/0xa30 [ 141.078525][ T6667] __get_user_pages+0x7ca/0x1d50 [ 141.078540][ T6667] populate_vma_page_range+0x2bb/0x450 [ 141.078558][ T6667] __mm_populate+0x107/0x3a0 [ 141.078574][ T6667] page last free pid 6666 tgid 6657 ts 140836301359 stack trace: [ 141.078581][ T6667] free_unref_folios+0xa6a/0x17e0 [ 141.078596][ T6667] shrink_folio_list+0x45d1/0x59c0 [ 141.078612][ T6667] evict_folios+0x35b/0x1790 [ 141.078628][ T6667] try_to_shrink_lruvec+0x32e/0x7b0 [ 141.078645][ T6667] shrink_lruvec+0x313/0x22e0 [ 141.083147][ T6667] shrink_node+0x74f/0x4410 [ 141.083174][ T6667] do_try_to_free_pages+0x2da/0x1500 [ 141.083191][ T6667] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 141.083208][ T6667] mem_cgroup_resize_max+0x1b0/0x330 [ 141.083219][ T6667] mem_cgroup_write+0x1b6/0x2f0 [ 141.083230][ T6667] cgroup_file_write+0x1e6/0x8a0 [ 141.083241][ T6667] kernfs_fop_write_iter+0x3e0/0x5f0 [ 141.083255][ T6667] vfs_write+0x6af/0x1050 [ 141.083265][ T6667] ksys_write+0x12a/0x250 [ 141.083275][ T6667] do_syscall_64+0x123/0x790 [ 141.083288][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.083402][ T6667] ------------[ cut here ]------------ [ 141.083407][ T6667] kernel BUG at mm/filemap.c:857! [ 141.083420][ T6667] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 141.339890][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.5.225 Not tainted syzkaller #0 PREEMPT(full) [ 141.349087][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 141.359142][ T6667] RIP: 0010:__filemap_add_folio+0xfe6/0x1290 [ 141.365154][ T6667] Code: bc b9 ff 48 c7 c6 40 62 1f 8c 4c 89 ef e8 22 5b 13 00 90 0f 0b e8 6a bc b9 ff 48 c7 c6 a0 62 1f 8c 4c 89 ef e8 0b 5b 13 00 90 <0f> 0b e8 53 bc b9 ff 90 0f 0b 90 e9 12 fc ff ff e8 45 bc b9 ff 48 [ 141.384766][ T6667] RSP: 0018:ffffc900034573a0 EFLAGS: 00010287 [ 141.390838][ T6667] RAX: 0000000000017a65 RBX: 0000000000112cc0 RCX: ffffc9001a5cb000 [ 141.398809][ T6667] RDX: 0000000000080000 RSI: ffffffff826817d8 RDI: ffff8880552caa44 [ 141.406784][ T6667] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 141.414754][ T6667] R10: 0000000000000001 R11: 1ffff110041e49fa R12: 0000000000000002 [ 141.422728][ T6667] R13: ffffea0000affdc0 R14: 0000000000000000 R15: 1ffff9200068ae9f [ 141.430704][ T6667] FS: 00007f57941fa6c0(0000) GS:ffff888122475000(0000) knlGS:0000000000000000 [ 141.439636][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.446226][ T6667] CR2: 0000001b3392421c CR3: 0000000058463000 CR4: 00000000003526f0 [ 141.454202][ T6667] Call Trace: [ 141.457478][ T6667] [ 141.460408][ T6667] ? lock_acquire+0x1d1/0x380 [ 141.465101][ T6667] ? __pfx___filemap_add_folio+0x10/0x10 [ 141.470758][ T6667] filemap_add_folio+0x1d3/0x640 [ 141.475708][ T6667] ? __pfx_filemap_add_folio+0x10/0x10 [ 141.481185][ T6667] ? __pfx___css_rstat_updated+0x10/0x10 [ 141.486824][ T6667] page_cache_ra_order+0x602/0xed0 [ 141.491952][ T6667] filemap_fault+0x1ae2/0x3150 [ 141.496719][ T6667] ? __pfx_filemap_fault+0x10/0x10 [ 141.501832][ T6667] ? find_held_lock+0x2b/0x80 [ 141.506512][ T6667] ? __pfx_filemap_map_pages+0x10/0x10 [ 141.511983][ T6667] __do_fault+0x10b/0x440 [ 141.516318][ T6667] do_fault+0xb3f/0x1890 [ 141.520572][ T6667] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 141.526822][ T6667] ? __pfx_do_fault+0x10/0x10 [ 141.531497][ T6667] ? pgd_none+0x9f/0xe0 [ 141.535658][ T6667] ? __pfx_pgd_none+0x10/0x10 [ 141.540342][ T6667] ? find_held_lock+0x2b/0x80 [ 141.545021][ T6667] __handle_mm_fault+0x1858/0x2f40 [ 141.550138][ T6667] ? __pfx___handle_mm_fault+0x10/0x10 [ 141.555599][ T6667] ? __pfx_mt_find+0x10/0x10 [ 141.560204][ T6667] handle_mm_fault+0x363/0xa30 [ 141.564977][ T6667] __get_user_pages+0x7ca/0x1d50 [ 141.569925][ T6667] ? __pfx_mt_find+0x10/0x10 [ 141.574520][ T6667] ? __pfx___get_user_pages+0x10/0x10 [ 141.579905][ T6667] populate_vma_page_range+0x2bb/0x450 [ 141.585376][ T6667] ? __pfx_populate_vma_page_range+0x10/0x10 [ 141.591362][ T6667] ? __pfx_find_vma_intersection+0x10/0x10 [ 141.597181][ T6667] __mm_populate+0x107/0x3a0 [ 141.601782][ T6667] ? __pfx___mm_populate+0x10/0x10 [ 141.606908][ T6667] ? up_write+0x2dc/0x5b0 [ 141.611238][ T6667] vm_mmap_pgoff+0x44a/0x490 [ 141.615835][ T6667] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 141.620955][ T6667] ? __fget_files+0x215/0x3d0 [ 141.625640][ T6667] ? __fget_files+0x21f/0x3d0 [ 141.630331][ T6667] ksys_mmap_pgoff+0x3cb/0x610 [ 141.635106][ T6667] ? kcov_ioctl+0x17a/0x750 [ 141.639612][ T6667] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 141.644907][ T6667] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 141.650718][ T6667] __x64_sys_mmap+0x125/0x190 [ 141.655409][ T6667] do_syscall_64+0x123/0x790 [ 141.660012][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.665937][ T6667] RIP: 0033:0x7f579339fb19 [ 141.670355][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.689968][ T6667] RSP: 002b:00007f57941fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 141.698386][ T6667] RAX: ffffffffffffffda RBX: 00007f5793626090 RCX: 00007f579339fb19 [ 141.706360][ T6667] RDX: 0000000000000007 RSI: 0000000000b36000 RDI: 0000200000000000 [ 141.714335][ T6667] RBP: 00007f5793437b70 R08: 0000000000000004 R09: 000000002cb25000 [ 141.722311][ T6667] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.730288][ T6667] R13: 00007f5793626128 R14: 00007f5793626090 R15: 00007ffdd747dfa8 [ 141.738269][ T6667] [ 141.741289][ T6667] Modules linked in: [ 141.746245][ T6667] ---[ end trace 0000000000000000 ]--- [ 141.838861][ T6667] RIP: 0010:__filemap_add_folio+0xfe6/0x1290 [ 141.838905][ T6667] Code: bc b9 ff 48 c7 c6 40 62 1f 8c 4c 89 ef e8 22 5b 13 00 90 0f 0b e8 6a bc b9 ff 48 c7 c6 a0 62 1f 8c 4c 89 ef e8 0b 5b 13 00 90 <0f> 0b e8 53 bc b9 ff 90 0f 0b 90 e9 12 fc ff ff e8 45 bc b9 ff 48 [ 141.838924][ T6667] RSP: 0018:ffffc900034573a0 EFLAGS: 00010287 [ 141.838941][ T6667] RAX: 0000000000017a65 RBX: 0000000000112cc0 RCX: ffffc9001a5cb000 [ 141.838954][ T6667] RDX: 0000000000080000 RSI: ffffffff826817d8 RDI: ffff8880552caa44 [ 141.838966][ T6667] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 141.838978][ T6667] R10: 0000000000000001 R11: 1ffff110041e49fa R12: 0000000000000002 [ 141.838989][ T6667] R13: ffffea0000affdc0 R14: 0000000000000000 R15: 1ffff9200068ae9f [ 141.839002][ T6667] FS: 00007f57941fa6c0(0000) GS:ffff888122475000(0000) knlGS:0000000000000000 [ 141.839021][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.839033][ T6667] CR2: 00007fde3e1ed200 CR3: 0000000058463000 CR4: 00000000003526f0 [ 141.839048][ T6667] Kernel panic - not syncing: Fatal exception [ 141.939867][ T6667] Kernel Offset: disabled [ 141.944168][ T6667] Rebooting in 86400 seconds..