last executing test programs: 3.947146038s ago: executing program 0 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', 0x0, 0x20, 0x0) 3.841927291s ago: executing program 0 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.555569736s ago: executing program 0 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a30000000000800074000000000040003"], 0xc0}, 0x1, 0x0, 0x3000000}, 0x0) 3.244257924s ago: executing program 0 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f00000003c0)="b67433", 0x3}], 0x1) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xe2c65) 2.956052009s ago: executing program 0 (id=1037): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0xfffffffc, 0xb, 0x0, 0x86, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="c0bf63f6b44d1866baf80cb868d43185ef66bafc0c66edf2400f0d3ec4627d1d05feffffffc744240000000100c7442402ab000000c7442406000000000f01142466b81f008ed83e0f79de66440fe74603440f07ad", 0x55}], 0x1, 0x8, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) unshare(0x6a040000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r6 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x2000005, 0x1, 0x6, 0xa8, 0xb, "d2000000000000e7ff000000000800000010c1"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffd000/0x3000)=nil, 0x3) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x114fd, 0x0, 0x5, 0x1021, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000900)=0x15) ioctl(r8, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2.955267898s ago: executing program 1 (id=1040): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) (async) 2.820288777s ago: executing program 1 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 2.482786819s ago: executing program 1 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff02000000000003e800000000000001"], 0x76) 2.29549053s ago: executing program 2 (id=1047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0100001000010000000000feffffffe000000200000000000000000000000000000000000000000000ffffb9920a01010200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414190000000080ffffffffffffff000000003300000000000000000000000000ffff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000084000000000000001c00170000000000ffffffff0000000000000000000000000000000048000100736861323536"], 0x15c}}, 0x4080) 2.216105549s ago: executing program 2 (id=1049): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 2.007639679s ago: executing program 2 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a01040000000000000000020000001f000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000020c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 1.659808389s ago: executing program 2 (id=1051): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x41}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f000046d000/0x4000)=nil, 0x4000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 1.52438883s ago: executing program 2 (id=1052): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{&(0x7f0000000200)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000580)="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", 0x5c1}], 0x1}}], 0x2, 0x4a080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfffffffffffff7d0}}, './file0\x00'}) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r10 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) syz_io_uring_setup(0xf, &(0x7f0000001200)={0x0, 0x0, 0x40000, 0x3, 0xffffffff, 0x0, 0x0}, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000001340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xd9a1, 0x20, 0x3, 0x191}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7fe, 0x1, 0x1, 0xb0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68b0, 0x80000, 0x2, 0xfd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3465, 0x8000, 0x0, 0x2eb}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe519, 0x4004, 0x3, 0x17a}}], 0x4, &(0x7f0000002680)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3ff}, 0x0, 0x0, '\x00', {0x3, 0x708, 0x0, &(0x7f0000001680)=@buf_1k="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"}}, &(0x7f0000002700)) r15 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) ioctl$DRM_IOCTL_VERSION(r15, 0xc0406400, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r17 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r17, &(0x7f0000000040)='mountstats\x00') syz_ublk_add_dev(r5, r7, r12, r14, &(0x7f0000002780)={0x2e, 0x3c, 0x0, r15, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r16, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002740)=@any_dev={0x3, 0x3f6, 0x0, 0x0, 0x1000, 0x10, r17}}}, &(0x7f0000002800)) write$binfmt_misc(r0, 0x0, 0x0) 1.164133705s ago: executing program 3 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 950.795478ms ago: executing program 1 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 881.239788ms ago: executing program 2 (id=1058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, 0xffffffffffffffff, 0xb1bf5000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x6, 0x0, 0x8, 0xffffffffffffffff, 0x6}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000c000000000000010800074000000001"], 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r10 = gettid() r11 = syz_open_procfs(r10, &(0x7f0000000000)='net/tcp\x00') pread64(r11, &(0x7f0000001340)=""/102390, 0x18ff6, 0x18ff6) sendmsg$NFT_MSG_GETFLOWTABLE(r11, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xf4, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x2000c810) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x240802, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r12, 0x40085112, &(0x7f0000000a00)=@x={0x94, 0x6, "00000090da00"}) preadv(r9, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/27, 0x1b}], 0x7, 0x9, 0x9) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000480)=0x5, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001802c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010c0002800500010000000000080007400000000004eaf0ae"], 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x2000000000000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 756.02069ms ago: executing program 1 (id=1059): r0 = socket(0x1e, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0xffffffea, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}]}}]}, 0x3c}}, 0x20040091) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x1ec, 0x1, 0x7, 0x1, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="1e", 0x1}], 0x1}}], 0x1, 0x9200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000001480)={'#! ', './sys/module/kvm_intel/parameters/vmentry_l1d_flush/file0'}, 0x3d) r4 = dup3(r2, r0, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{&(0x7f0000000140)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/8, 0x8}, {&(0x7f0000000540)=""/65, 0x41}, {&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000780)=""/245, 0xf5}], 0x8, &(0x7f0000000900)=""/34, 0x22}, 0x8}], 0x1, 0x40002063, 0x0) 755.874405ms ago: executing program 3 (id=1060): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0100001000010000000000feffffffe000000200000000000000000000000000000000000000000000ffffb9920a01010200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141419000000000000000001000000000000003300000000000000000000000000ffff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000084000000000000001c00170000000000ffffffff0000000000000000000000000000000048000100736861323536"], 0x15c}}, 0x4080) 686.078643ms ago: executing program 0 (id=1061): r0 = socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x41987000) (async) r1 = dup3(r0, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000700000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async, rerun: 32) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write(r4, &(0x7f0000000280)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000d7", 0x35) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) exit(0xffff) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000002c0)) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/47}], 0x1, 0x0, 0x23}}], 0x1, 0x121, 0x0) 685.274523ms ago: executing program 3 (id=1062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000900000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 585.941479ms ago: executing program 3 (id=1063): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0xd7983ab608da75d7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x24, &(0x7f0000002d80)="f0c4", 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000030000000a0030"], 0xb8}}, 0x4000) 284.182036ms ago: executing program 3 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a30000000000800074000000000040003"], 0xc0}, 0x1, 0x0, 0xf5ffffff}, 0x0) 165.320617ms ago: executing program 1 (id=1065): socket$igmp6(0xa, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x3a00, 0x4000}, 0x4000) 0s ago: executing program 3 (id=1066): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) kernel console output (not intermixed with test programs): ing interface batadv_slave_0 (retrying later): interface not active [ 106.272014][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.272030][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.272055][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.311811][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.378404][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.411956][ T5752] hsr_slave_0: entered promiscuous mode [ 106.412846][ T5752] hsr_slave_1: entered promiscuous mode [ 106.416877][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.417500][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.417514][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.417536][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.462550][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.462566][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.462585][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.490706][ T5755] team0: Port device team_slave_0 added [ 106.504387][ T5751] team0: Port device team_slave_0 added [ 106.506861][ T5751] team0: Port device team_slave_1 added [ 106.517548][ T5755] team0: Port device team_slave_1 added [ 106.689539][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.689555][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.689574][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.693052][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.693066][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.693085][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.773471][ T5754] hsr_slave_0: entered promiscuous mode [ 106.774511][ T5754] hsr_slave_1: entered promiscuous mode [ 106.775376][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 106.775458][ T5754] Cannot create hsr debugfs directory [ 106.776899][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.776912][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.776932][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.778435][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.778446][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.778466][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.005929][ T5751] hsr_slave_0: entered promiscuous mode [ 107.006711][ T5751] hsr_slave_1: entered promiscuous mode [ 107.007343][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 107.007360][ T5751] Cannot create hsr debugfs directory [ 107.068602][ T5755] hsr_slave_0: entered promiscuous mode [ 107.080704][ T5755] hsr_slave_1: entered promiscuous mode [ 107.081369][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 107.081387][ T5755] Cannot create hsr debugfs directory [ 107.611204][ T5752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.623754][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.627668][ T5752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.658403][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.659358][ T5752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.676528][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.677222][ T5752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.729893][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.791532][ T5761] Bluetooth: hci1: command tx timeout [ 107.801523][ T5761] Bluetooth: hci0: command tx timeout [ 107.870475][ T5761] Bluetooth: hci2: command tx timeout [ 107.950017][ T5754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.978095][ T5761] Bluetooth: hci3: command tx timeout [ 107.988954][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.991728][ T5754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.019111][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.021408][ T5754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.031407][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.075587][ T5754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.085803][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.268282][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.284295][ T5755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.338087][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.383379][ T5755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.399096][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.406195][ T5755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.434430][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.456518][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.461191][ T5755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.471057][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.577191][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.577316][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.643236][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.643410][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.710897][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.724319][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.739076][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.747588][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.748566][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.765882][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.814696][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.840130][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.977802][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.093624][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.117941][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.147326][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.171835][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.172105][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.193841][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.193909][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.235229][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.235312][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.353971][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.354048][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.457894][ T5754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.531791][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.622814][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.656261][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.656347][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.676724][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.676805][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.901260][ T5761] Bluetooth: hci1: command tx timeout [ 109.914085][ T5761] Bluetooth: hci0: command tx timeout [ 109.938667][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.990660][ T5761] Bluetooth: hci2: command tx timeout [ 110.050043][ T5761] Bluetooth: hci3: command tx timeout [ 110.235710][ T5752] veth0_vlan: entered promiscuous mode [ 110.253961][ T5752] veth1_vlan: entered promiscuous mode [ 110.326284][ T5752] veth0_macvtap: entered promiscuous mode [ 110.330849][ T5752] veth1_macvtap: entered promiscuous mode [ 110.416514][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.440749][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.463877][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.684590][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.703835][ T5754] veth0_vlan: entered promiscuous mode [ 110.790746][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.790969][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.791005][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.791038][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.808687][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.872165][ T5754] veth1_vlan: entered promiscuous mode [ 110.884770][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.884787][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.018991][ T5755] veth0_vlan: entered promiscuous mode [ 111.027825][ T5755] veth1_vlan: entered promiscuous mode [ 111.078147][ T5754] veth0_macvtap: entered promiscuous mode [ 111.091248][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.091268][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.138361][ T5754] veth1_macvtap: entered promiscuous mode [ 111.185612][ T44] audit: type=1400 audit(1789187513.784:168): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.187310][ T44] audit: type=1400 audit(1789187513.784:169): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.9lztDZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.188947][ T5751] veth0_vlan: entered promiscuous mode [ 111.189880][ T44] audit: type=1400 audit(1789187513.784:170): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.194289][ T44] audit: type=1400 audit(1789187513.794:171): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.9lztDZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 111.218881][ T44] audit: type=1400 audit(1789187513.794:172): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.9lztDZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 111.218924][ T44] audit: type=1400 audit(1789187513.814:173): avc: denied { unmount } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.256217][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.266823][ T5755] veth0_macvtap: entered promiscuous mode [ 111.271962][ T5755] veth1_macvtap: entered promiscuous mode [ 111.274897][ T44] audit: type=1400 audit(1789187513.874:174): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 111.277353][ T44] audit: type=1400 audit(1789187513.874:175): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="gadgetfs" ino=7070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 111.281837][ T44] audit: type=1400 audit(1789187513.874:176): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.308191][ T5751] veth1_vlan: entered promiscuous mode [ 111.321567][ T44] audit: type=1400 audit(1789187513.874:177): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 111.336853][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.342047][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.383568][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.393540][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.393600][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.393634][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.490829][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.544060][ T5752] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.622598][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.622620][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.670662][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.671256][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.671447][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.671833][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.802407][ T5751] veth0_macvtap: entered promiscuous mode [ 111.817028][ T5751] veth1_macvtap: entered promiscuous mode [ 111.888987][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.889016][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.933049][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.933078][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.952830][ T5761] Bluetooth: hci0: command tx timeout [ 111.952868][ T5761] Bluetooth: hci1: command tx timeout [ 112.015092][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.038575][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.040716][ T5094] Bluetooth: hci2: command tx timeout [ 112.054961][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.054983][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.110660][ T5094] Bluetooth: hci3: command tx timeout [ 112.275655][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.275691][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.275713][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.284625][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.316365][ T5902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4'. [ 112.567171][ T5902] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 112.685555][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.685576][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.914125][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.914152][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.013117][ T5921] ptrace attach of "/syz-executor exec"[5927] was attempted by "/syz-executor exec"[5921] [ 114.471830][ T5936] gfs2: error -5 reading superblock [ 114.621404][ T5933] lo: entered allmulticast mode [ 114.625405][ T5933] tunl0: entered allmulticast mode [ 114.626894][ T5933] gre0: entered allmulticast mode [ 114.657504][ T5945] ip_tables: iptables: counters copy to user failed while replacing table [ 114.910395][ T5933] gretap0: entered allmulticast mode [ 114.978893][ T5933] erspan0: entered allmulticast mode [ 114.998185][ T5933] ip_vti0: entered allmulticast mode [ 115.071768][ T5933] ip6_vti0: entered allmulticast mode [ 115.074548][ T5933] sit0: entered allmulticast mode [ 115.099685][ T5933] ip6tnl0: entered allmulticast mode [ 115.147722][ T5933] ip6gre0: entered allmulticast mode [ 115.174804][ T5933] syz_tun: entered allmulticast mode [ 115.178611][ T5933] ip6gretap0: entered allmulticast mode [ 115.206756][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.207486][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.210009][ T5933] bridge0: entered allmulticast mode [ 115.213878][ T5933] vcan0: entered allmulticast mode [ 115.286026][ T5933] bond0: entered allmulticast mode [ 115.286052][ T5933] bond_slave_0: entered allmulticast mode [ 115.286066][ T5933] bond_slave_1: entered allmulticast mode [ 115.289103][ T5933] team0: entered allmulticast mode [ 115.289127][ T5933] team_slave_0: entered allmulticast mode [ 115.289141][ T5933] team_slave_1: entered allmulticast mode [ 115.385577][ T5933] dummy0: entered allmulticast mode [ 115.406744][ T5933] nlmon0: entered allmulticast mode [ 115.409774][ T5933] batadv0: entered allmulticast mode [ 115.416297][ T5933] vxcan0: entered allmulticast mode [ 115.417116][ T5933] vxcan1: entered allmulticast mode [ 115.417886][ T5933] veth0: entered allmulticast mode [ 115.420750][ T5933] veth1: entered allmulticast mode [ 115.527579][ T5933] wg0: entered allmulticast mode [ 115.561684][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 115.701884][ T5933] wg1: entered allmulticast mode [ 115.748441][ T5933] wg2: entered allmulticast mode [ 115.751230][ T5933] veth0_to_bridge: entered allmulticast mode [ 115.758132][ T5933] bridge_slave_0: left promiscuous mode [ 115.758455][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.793721][ T5933] veth1_to_bridge: entered allmulticast mode [ 115.798884][ T5933] bridge_slave_1: left promiscuous mode [ 115.799047][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.844733][ T5933] veth0_to_bond: entered allmulticast mode [ 115.929114][ T5933] bond0: (slave bond_slave_0): Releasing backup interface [ 115.971031][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 115.999913][ T5933] veth1_to_bond: entered allmulticast mode [ 116.024812][ T5933] bond0: (slave bond_slave_1): Releasing backup interface [ 116.028408][ T5933] veth0_to_team: entered allmulticast mode [ 116.053012][ T5933] team0: Port device team_slave_0 removed [ 116.053403][ T5933] veth1_to_team: entered allmulticast mode [ 116.061544][ T5933] team0: Port device team_slave_1 removed [ 116.062027][ T5933] veth0_to_batadv: entered allmulticast mode [ 116.064526][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.064573][ T5933] batadv_slave_0: entered allmulticast mode [ 116.066833][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.102783][ T5933] veth1_to_batadv: entered allmulticast mode [ 116.119389][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.119435][ T5933] batadv_slave_1: entered allmulticast mode [ 116.123558][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.139782][ T5933] xfrm0: entered allmulticast mode [ 116.143954][ T5933] veth0_to_hsr: entered allmulticast mode [ 116.146501][ T5933] hsr_slave_0: entered allmulticast mode [ 116.148069][ T5933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.326511][ T44] kauditd_printk_skb: 42 callbacks suppressed [ 116.326529][ T44] audit: type=1400 audit(1789187518.924:220): avc: denied { ioctl } for pid=5970 comm="syz.0.19" path="socket:[8782]" dev="sockfs" ino=8782 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.380714][ T44] audit: type=1400 audit(1789187518.984:221): avc: denied { unmount } for pid=5755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.615843][ T5961] team0: Port device team_slave_0 removed [ 116.660338][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 116.669609][ T44] audit: type=1400 audit(1789187519.264:222): avc: denied { ioctl } for pid=5968 comm="syz.1.18" path="socket:[11804]" dev="sockfs" ino=11804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.694427][ T5969] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18'. [ 116.762356][ T44] audit: type=1804 audit(1789187519.364:223): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.23" name="/newroot/4/file1" dev="tmpfs" ino=39 res=1 errno=0 [ 117.226087][ T44] audit: type=1326 audit(1789187519.784:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.29" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd3659e159 code=0x0 [ 117.232292][ T44] audit: type=1400 audit(1789187519.834:225): avc: denied { bind } for pid=5997 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.469941][ T5094] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 117.489277][ T44] audit: type=1400 audit(1789187520.084:226): avc: denied { create } for pid=6006 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.588776][ T44] audit: type=1400 audit(1789187520.174:227): avc: denied { create } for pid=6011 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.589263][ T44] audit: type=1400 audit(1789187520.174:228): avc: denied { bind } for pid=6011 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.662795][ T44] audit: type=1400 audit(1789187520.264:229): avc: denied { setopt } for pid=6011 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.694612][ T6020] ip_tables: iptables: counters copy to user failed while replacing table [ 117.938839][ T6029] program syz.1.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.039568][ T6032] Zero length message leads to an empty skb [ 118.106002][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 118.296423][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 118.416845][ T6045] can: request_module (can-proto-5) failed. [ 118.445324][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 118.594084][ T6049] team0: Port device team_slave_0 removed [ 119.215619][ T57] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 119.388960][ T57] usb 8-1: device descriptor read/64, error -71 [ 119.562708][ T6073] netlink: 'syz.2.56': attribute type 2 has an invalid length. [ 119.644153][ T57] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 119.804308][ T57] usb 8-1: device descriptor read/64, error -71 [ 119.919708][ T57] usb usb8-port1: attempt power cycle [ 120.303092][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 120.322214][ T57] usb 8-1: device descriptor read/8, error -71 [ 120.585898][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.633471][ T57] usb 8-1: device descriptor read/8, error -71 [ 120.731124][ T57] usb usb8-port1: unable to enumerate USB device [ 121.139884][ T6095] ip_tables: iptables: counters copy to user failed while replacing table [ 121.340348][ T44] kauditd_printk_skb: 16 callbacks suppressed [ 121.340366][ T44] audit: type=1400 audit(1789187523.934:246): avc: denied { read append } for pid=6096 comm="syz.2.65" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.340405][ T44] audit: type=1400 audit(1789187523.934:247): avc: denied { open } for pid=6096 comm="syz.2.65" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.376835][ T5094] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 121.376862][ T5094] CPU: 1 UID: 0 PID: 5094 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 121.376889][ T5094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.376904][ T5094] Workqueue: hci3 hci_rx_work [ 121.376929][ T5094] Call Trace: [ 121.376936][ T5094] [ 121.376945][ T5094] dump_stack_lvl+0x100/0x190 [ 121.376977][ T5094] sysfs_warn_dup.cold+0x1c/0x28 [ 121.377006][ T5094] sysfs_create_dir_ns+0x24b/0x2b0 [ 121.377035][ T5094] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 121.377060][ T5094] ? find_held_lock+0x2b/0x80 [ 121.377087][ T5094] ? kobject_add_internal+0x25f/0x930 [ 121.377118][ T5094] ? kobject_add_internal+0x25f/0x930 [ 121.377150][ T5094] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.377175][ T5094] kobject_add_internal+0x2c8/0x930 [ 121.377210][ T5094] kobject_add+0x16a/0x1e0 [ 121.377228][ T5094] ? __pfx_kobject_add+0x10/0x10 [ 121.377245][ T5094] ? class_to_subsys+0x10f/0x150 [ 121.377275][ T5094] ? kobject_put+0xb9/0x640 [ 121.377301][ T5094] ? _raw_spin_unlock+0x28/0x50 [ 121.377328][ T5094] device_add+0x294/0x1970 [ 121.377353][ T5094] ? __pfx_dev_set_name+0x10/0x10 [ 121.377381][ T5094] ? __pfx_device_add+0x10/0x10 [ 121.377404][ T5094] ? mgmt_send_event_skb+0x2fb/0x460 [ 121.377434][ T5094] hci_conn_add_sysfs+0x1a3/0x260 [ 121.377460][ T5094] le_conn_complete_evt+0x122f/0x2130 [ 121.377489][ T5094] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 121.377509][ T5094] ? hci_event_packet+0x186/0xcd0 [ 121.377528][ T5094] ? hci_event_packet+0x186/0xcd0 [ 121.377555][ T5094] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 121.377579][ T5094] ? skb_pull_data+0x15f/0x1e0 [ 121.377609][ T5094] hci_le_meta_evt+0x34a/0x5f0 [ 121.377633][ T5094] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 121.377659][ T5094] hci_event_packet+0x51c/0xcd0 [ 121.377690][ T5094] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 121.377717][ T5094] ? __pfx_hci_event_packet+0x10/0x10 [ 121.377744][ T5094] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.377778][ T5094] hci_rx_work+0x451/0xfc0 [ 121.377804][ T5094] process_one_work+0xac7/0x1b10 [ 121.377843][ T5094] ? __pfx_process_one_work+0x10/0x10 [ 121.377873][ T5094] ? lock_acquire+0x1d1/0x380 [ 121.377900][ T5094] ? __pfx_hci_rx_work+0x10/0x10 [ 121.377922][ T5094] worker_thread+0x5ef/0xe50 [ 121.377956][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 121.377985][ T5094] ? kthread+0x13a/0x450 [ 121.378010][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 121.378037][ T5094] kthread+0x373/0x450 [ 121.378061][ T5094] ? __pfx_kthread+0x10/0x10 [ 121.378089][ T5094] ret_from_fork+0x730/0xd60 [ 121.378111][ T5094] ? __pfx_ret_from_fork+0x10/0x10 [ 121.378133][ T5094] ? __switch_to+0x800/0x10f0 [ 121.378158][ T5094] ? __pfx_kthread+0x10/0x10 [ 121.378184][ T5094] ret_from_fork_asm+0x1a/0x30 [ 121.378217][ T5094] [ 121.378246][ T5094] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.378280][ T5094] Bluetooth: hci3: failed to register connection device [ 121.453295][ T6100] netlink: 'syz.2.65': attribute type 29 has an invalid length. [ 121.457173][ T44] audit: type=1400 audit(1789187524.034:248): avc: denied { ioctl } for pid=6096 comm="syz.2.65" path="socket:[10663]" dev="sockfs" ino=10663 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.518768][ T6099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.518842][ T6099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.558858][ T6099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.696948][ T44] audit: type=1400 audit(1789187524.284:249): avc: denied { ioctl } for pid=6103 comm="syz.1.68" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8946 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.701889][ T6099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.701965][ T6099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.781658][ T6099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.811656][ T44] audit: type=1400 audit(1789187524.374:250): avc: denied { connect } for pid=6103 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.811703][ T44] audit: type=1400 audit(1789187524.404:251): avc: denied { write } for pid=6103 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.889829][ T44] audit: type=1400 audit(1789187524.484:252): avc: denied { shutdown } for pid=6103 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.917974][ T6099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.919314][ T6099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.947003][ T44] audit: type=1400 audit(1789187524.544:253): avc: denied { mounton } for pid=6103 comm="syz.1.68" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 121.954784][ T6099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.978581][ T6105] omfs: Invalid superblock (0) [ 121.983634][ T6099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.983918][ T6099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.096837][ T6099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.100071][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 122.154813][ T6099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.462772][ T6099] hwrng_fill thread creation failed [ 122.496496][ T6115] Invalid source name [ 122.527136][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 122.591950][ T44] audit: type=1400 audit(1789187525.194:254): avc: denied { create } for pid=6121 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.596427][ T44] audit: type=1400 audit(1789187525.194:255): avc: denied { read } for pid=6121 comm="syz.1.74" name="video7" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 122.757836][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 123.081657][ T6147] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 123.245488][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 123.561142][ T5094] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.745157][ T5094] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.976516][ T5094] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.030980][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.726189][ T6187] ip_tables: iptables: counters copy to user failed while replacing table [ 124.859639][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 125.390751][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 125.620694][ T3386] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 125.638945][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.700029][ T6209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.98'. [ 125.700544][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 125.714417][ T6209] syz.0.98 uses obsolete (PF_INET,SOCK_PACKET) [ 125.773015][ T3386] usb 6-1: Invalid ep0 maxpacket: 16 [ 125.806150][ T5761] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.859413][ T6209] netlink: 'syz.0.98': attribute type 171 has an invalid length. [ 125.947735][ T3386] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 126.030626][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.130525][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.140506][ T3386] usb 6-1: Invalid ep0 maxpacket: 16 [ 126.141766][ T3386] usb usb6-port1: attempt power cycle [ 126.176569][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 126.321590][ T57] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.329020][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.329062][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.396357][ T57] usb 8-1: config 0 descriptor?? [ 126.397998][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 126.398014][ T44] audit: type=1400 audit(1789187528.994:278): avc: denied { ioctl } for pid=6218 comm="syz.2.107" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.398692][ T44] audit: type=1400 audit(1789187528.994:279): avc: denied { create } for pid=6218 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.430549][ T44] audit: type=1400 audit(1789187529.004:280): avc: denied { getopt } for pid=6218 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.457754][ T44] audit: type=1400 audit(1789187529.054:281): avc: denied { write } for pid=6218 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 126.459682][ T44] audit: type=1400 audit(1789187529.054:282): avc: denied { bind } for pid=6218 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.460170][ T44] audit: type=1400 audit(1789187529.054:283): avc: denied { name_bind } for pid=6218 comm="syz.2.107" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 126.460591][ T44] audit: type=1400 audit(1789187529.054:284): avc: denied { node_bind } for pid=6218 comm="syz.2.107" saddr=fc00::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 126.483066][ T44] audit: type=1400 audit(1789187529.084:285): avc: denied { ioctl } for pid=6218 comm="syz.2.107" path="socket:[10802]" dev="sockfs" ino=10802 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.541475][ T3386] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 126.575128][ T3386] usb 6-1: Invalid ep0 maxpacket: 16 [ 126.716278][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 126.716387][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 126.720380][ T3386] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 126.746935][ T44] audit: type=1400 audit(1789187529.344:286): avc: denied { write } for pid=6226 comm="syz.2.110" name="radio0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.778161][ T3386] usb 6-1: Invalid ep0 maxpacket: 16 [ 126.778581][ T3386] usb usb6-port1: unable to enumerate USB device [ 126.810046][ T44] audit: type=1400 audit(1789187529.404:287): avc: denied { create } for pid=6228 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.861141][ T57] usb 8-1: USB disconnect, device number 6 [ 127.308152][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 127.450348][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 127.451571][ T57] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 127.453480][ T57] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 127.453502][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.453516][ T57] usb 8-1: config 0 has no interface number 0 [ 127.453539][ T57] usb 8-1: config 0 interface 52 has no altsetting 0 [ 127.453564][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.459337][ T57] usb 8-1: config 0 descriptor?? [ 127.720491][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.900414][ T5761] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.111478][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.200924][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.543492][ T6259] ip_tables: iptables: counters copy to user failed while replacing table [ 128.582620][ T6261] program syz.1.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.713986][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 128.860079][ T6261] warning: `syz.1.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.030749][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 129.199344][ T5929] usb 8-1: USB disconnect, device number 7 [ 129.308984][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 129.534367][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 130.284195][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.364322][ T6314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.143'. [ 130.624377][ T6324] ip_tables: iptables: counters copy to user failed while replacing table [ 130.657124][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 131.259355][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 131.590936][ T44] kauditd_printk_skb: 23 callbacks suppressed [ 131.590964][ T44] audit: type=1400 audit(1789187534.194:311): avc: denied { block_suspend } for pid=6348 comm="syz.2.158" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.661541][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 131.901840][ T44] audit: type=1400 audit(1789187534.504:312): avc: denied { append } for pid=6358 comm="syz.1.161" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 131.912909][ T6359] cramfs: checking physical address 0x0000000101f00000 for linear cramfs image [ 131.913106][ T6359] cramfs: wrong magic [ 131.918903][ T6359] cramfs: wrong magic [ 131.957569][ T6365] netlink: 95 bytes leftover after parsing attributes in process `syz.3.163'. [ 132.313522][ T44] audit: type=1400 audit(1789187534.914:313): avc: denied { create } for pid=6381 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.574201][ T44] audit: type=1400 audit(1789187535.154:314): avc: denied { bind } for pid=6386 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.803026][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 133.155150][ T6405] ip_tables: iptables: counters copy to user failed while replacing table [ 133.281760][ T44] audit: type=1400 audit(1789187535.884:315): avc: denied { write } for pid=6408 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.288517][ T44] audit: type=1400 audit(1789187535.884:316): avc: denied { connect } for pid=6408 comm="syz.1.176" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.661693][ T6423] trusted_key: encrypted_key: keyword 'u' not recognized [ 133.939888][ T6429] ======================================================= [ 133.939888][ T6429] WARNING: The mand mount option has been deprecated and [ 133.939888][ T6429] and is ignored by this kernel. Remove the mand [ 133.939888][ T6429] option from the mount to silence this warning. [ 133.939888][ T6429] ======================================================= [ 134.237870][ T6439] __nla_validate_parse: 3 callbacks suppressed [ 134.237893][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 134.526867][ T44] audit: type=1400 audit(1789187537.124:317): avc: denied { setopt } for pid=6447 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.841427][ T5761] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 135.022543][ T44] audit: type=1400 audit(1789187537.604:318): avc: denied { read } for pid=6465 comm="syz.3.197" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.022626][ T44] audit: type=1400 audit(1789187537.604:319): avc: denied { open } for pid=6465 comm="syz.3.197" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.146230][ T6469] binder: binder_mmap: 6465 200000000000-200000200000 bad vm_flags failed -1 [ 135.155897][ T44] audit: type=1400 audit(1789187537.744:320): avc: denied { map } for pid=6465 comm="syz.3.197" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.182949][ T6472] ip_tables: iptables: counters copy to user failed while replacing table [ 135.563734][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 135.807059][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. üHü[ 135.925886][ T5761] Bluetooth: hci4: setting up ROME/QCA6390 [ 135.983621][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 136.141655][ T6492] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 ü[ 136.756580][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 136.756599][ T44] audit: type=1400 audit(1789187539.344:325): avc: denied { mount } for pid=6504 comm="syz.1.212" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.756632][ T44] audit: type=1400 audit(1789187539.344:326): avc: denied { remount } for pid=6504 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.756658][ T44] audit: type=1400 audit(1789187539.344:327): avc: denied { setopt } for pid=6504 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.768174][ T44] audit: type=1400 audit(1789187539.354:328): avc: denied { unmount } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.040822][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 137.148585][ T44] audit: type=1400 audit(1789187539.724:329): avc: denied { getopt } for pid=6517 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.396472][ T44] audit: type=1400 audit(1789187539.994:330): avc: denied { connect } for pid=6529 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.397194][ T44] audit: type=1400 audit(1789187539.994:331): avc: denied { bind } for pid=6529 comm="syz.3.221" lport=52617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.397454][ T44] audit: type=1400 audit(1789187539.994:332): avc: denied { node_bind } for pid=6529 comm="syz.3.221" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 137.554695][ T6543] ip_tables: iptables: counters copy to user failed while replacing table [ 137.920447][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 138.032227][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 138.113837][ T44] audit: type=1400 audit(1789187540.704:333): avc: denied { write } for pid=6554 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.115428][ T44] audit: type=1400 audit(1789187540.704:334): avc: denied { connect } for pid=6554 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.138327][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. Hü[ 138.362004][ T5094] Bluetooth: hci4: command 0xfc00 tx timeout [ 138.363928][ T5761] Bluetooth: hci4: Reading QCA version information failed (-110) [ 138.365603][ T5761] Bluetooth: hci4: Retry BT power ON:0 ü[ 139.273546][ T6587] syzkaller0: entered promiscuous mode [ 139.273570][ T6587] syzkaller0: entered allmulticast mode [ 140.283293][ T6601] overlayfs: unescaped trailing colons in lowerdir mount option. [ 140.609943][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. Hü[ 140.770574][ T5094] Bluetooth: hci4: command 0xfc00 tx timeout [ 140.780399][ T5761] Bluetooth: hci4: Reading QCA version information failed (-110) [ 140.780424][ T5761] Bluetooth: hci4: Retry BT power ON:1 ü[ 141.601399][ T6621] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 141.601421][ T6621] netlink: 55 bytes leftover after parsing attributes in process `syz.1.248'. Hü[ 143.187023][ T5094] Bluetooth: hci4: command 0xfc00 tx timeout [ 143.187168][ T5761] Bluetooth: hci4: Reading QCA version information failed (-110) [ 143.187190][ T5761] Bluetooth: hci4: Retry BT power ON:2 ü[ 145.077759][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.077821][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.568095][ T68] Bluetooth: hci4: command 0xfc00 tx timeout [ 145.578951][ T5761] Bluetooth: hci4: Reading QCA version information failed (-110) [ 146.112473][ T6627] ip_tables: iptables: counters copy to user failed while replacing table [ 146.301016][ T6630] ip_tables: iptables: counters copy to user failed while replacing table [ 146.309895][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 146.540158][ T6642] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 146.561795][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 146.599989][ T6643] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 146.906340][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.907371][ T6642] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 146.922897][ T6653] fuse: Unknown parameter 'íÿ' [ 146.935184][ T6642] team0: Port device netdevsim1 added [ 147.205793][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 147.429836][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'. [ 147.429865][ T6665] tipc: Invalid UDP bearer configuration [ 147.429900][ T6665] tipc: Enabling of bearer rejected, failed to enable media [ 147.930642][ T44] kauditd_printk_skb: 12 callbacks suppressed [ 147.930661][ T44] audit: type=1400 audit(1789187550.534:347): avc: denied { write } for pid=6670 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.428637][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.268'. [ 148.622732][ T6691] cgroup: No subsys list or none specified [ 148.727118][ T6691] cgroup: No subsys list or none specified [ 149.072079][ T44] audit: type=1400 audit(1789187551.654:348): avc: denied { read } for pid=6704 comm="syz.1.272" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.072386][ T44] audit: type=1400 audit(1789187551.654:349): avc: denied { open } for pid=6704 comm="syz.1.272" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.084885][ T44] audit: type=1800 audit(1789187551.654:350): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.272" name=08 dev="sda1" ino=2039 res=0 errno=0 [ 149.114083][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 149.182126][ T6711] ip_tables: iptables: counters copy to user failed while replacing table [ 149.351179][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 149.469582][ T44] audit: type=1400 audit(1789187552.064:351): avc: denied { create } for pid=6715 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.116679][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 150.834686][ T44] audit: type=1400 audit(1789187553.434:352): avc: denied { name_connect } for pid=6721 comm="syz.0.278" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.605059][ T44] audit: type=1400 audit(1789187554.204:353): avc: denied { write } for pid=6752 comm="syz.2.287" path="socket:[13821]" dev="sockfs" ino=13821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.620901][ T44] audit: type=1400 audit(1789187554.224:354): avc: denied { read } for pid=6752 comm="syz.2.287" path="socket:[13821]" dev="sockfs" ino=13821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.863513][ T44] audit: type=1400 audit(1789187554.454:355): avc: denied { create } for pid=6755 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.864155][ T44] audit: type=1400 audit(1789187554.454:356): avc: denied { write } for pid=6755 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.922820][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 151.959015][ T6756] team0: entered allmulticast mode [ 151.959040][ T6756] team_slave_1: entered allmulticast mode [ 152.523725][ T6775] ip_tables: iptables: counters copy to user failed while replacing table [ 152.638880][ T6777] misc userio: No port type given on /dev/userio [ 153.062461][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 153.096729][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 153.306552][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 153.422937][ T6795] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 153.422957][ T6795] netlink: 'syz.1.302': attribute type 4 has an invalid length. [ 153.422968][ T6795] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.302'. [ 153.796815][ T6797] macvtap1: entered promiscuous mode [ 154.167976][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 154.167995][ T44] audit: type=1400 audit(1789187556.754:360): avc: denied { write } for pid=6806 comm="syz.1.308" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.168038][ T44] audit: type=1400 audit(1789187556.754:361): avc: denied { ioctl } for pid=6806 comm="syz.1.308" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.267402][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.267530][ T6807] batadv_slave_0: entered promiscuous mode [ 154.267543][ T6807] batadv_slave_0: entered allmulticast mode [ 155.985328][ T6842] ip_tables: iptables: counters copy to user failed while replacing table [ 155.988884][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 156.192876][ T6840] macsec1: entered allmulticast mode [ 156.192904][ T6840] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 156.193024][ T6840] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 156.194897][ T6840] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 156.241232][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 156.420392][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 156.798141][ T6868] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.906479][ T44] audit: type=1400 audit(1789187559.504:362): avc: denied { create } for pid=6875 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.230535][ T5737] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 157.412585][ T5737] usb 8-1: Invalid ep0 maxpacket: 16 [ 157.560936][ T5737] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 157.572175][ T44] audit: type=1400 audit(1789187560.174:363): avc: denied { getopt } for pid=6892 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.753553][ T5737] usb 8-1: Invalid ep0 maxpacket: 16 [ 157.753946][ T5737] usb usb8-port1: attempt power cycle [ 158.113420][ T6900] ip_tables: iptables: counters copy to user failed while replacing table [ 158.123124][ T5737] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 158.143321][ T5737] usb 8-1: Invalid ep0 maxpacket: 16 [ 158.300500][ T5737] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 158.370716][ T5737] usb 8-1: Invalid ep0 maxpacket: 16 [ 158.370934][ T5737] usb usb8-port1: unable to enumerate USB device [ 158.481440][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.542685][ T44] audit: type=1400 audit(1789187561.144:364): avc: denied { mount } for pid=6905 comm="syz.0.347" name="/" dev="configfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 158.544775][ T44] audit: type=1400 audit(1789187561.144:365): avc: denied { search } for pid=6905 comm="syz.0.347" name="/" dev="configfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.544963][ T44] audit: type=1400 audit(1789187561.144:366): avc: denied { search } for pid=6905 comm="syz.0.347" name="usb_gadget" dev="configfs" ino=5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.548045][ T44] audit: type=1400 audit(1789187561.144:367): avc: denied { write search } for pid=6905 comm="syz.0.347" name="usb_gadget" dev="configfs" ino=5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.548644][ T44] audit: type=1400 audit(1789187561.144:368): avc: denied { add_name } for pid=6905 comm="syz.0.347" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.549658][ T44] audit: type=1400 audit(1789187561.144:369): avc: denied { create } for pid=6905 comm="syz.0.347" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 158.822869][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 159.097167][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 159.170633][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 159.170653][ T44] audit: type=1400 audit(1789187561.774:378): avc: denied { listen } for pid=6922 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.171189][ T44] audit: type=1400 audit(1789187561.774:379): avc: denied { accept } for pid=6922 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.403388][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 159.480075][ T44] audit: type=1400 audit(1789187562.074:380): avc: denied { create } for pid=6930 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.553750][ T6935] Bluetooth: MGMT ver 1.23 [ 159.894435][ T44] audit: type=1400 audit(1789187562.494:381): avc: denied { mounton } for pid=6942 comm="syz.1.356" path="/116/proc" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.425967][ T6943] syz.1.356 (6943): drop_caches: 2 [ 160.634624][ T44] audit: type=1400 audit(1789187563.234:382): avc: denied { mount } for pid=6957 comm="syz.3.362" name="/" dev="hugetlbfs" ino=15514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 160.763438][ T44] audit: type=1400 audit(1789187563.354:383): avc: denied { bind } for pid=6963 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.820997][ T44] audit: type=1400 audit(1789187563.404:384): avc: denied { ioctl } for pid=6963 comm="syz.2.365" path="socket:[16507]" dev="sockfs" ino=16507 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.121819][ T44] audit: type=1400 audit(1789187563.724:385): avc: denied { bind } for pid=6972 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.163088][ T44] audit: type=1400 audit(1789187563.764:386): avc: denied { write } for pid=6972 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.170636][ T44] audit: type=1400 audit(1789187563.774:387): avc: denied { read } for pid=6972 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.174431][ T6974] xt_hashlimit: size too large, truncated to 1048576 [ 161.476799][ T6973] xt_hashlimit: size too large, truncated to 1048576 [ 161.487255][ T6979] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 161.860831][ T6990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.969690][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 162.023180][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 162.090711][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 162.162663][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 162.229841][ T7002] team0: Port device team_slave_0 removed [ 162.290885][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 162.290999][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 162.291124][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 163.304043][ T7046] raw_sendmsg: syz.1.386 forgot to set AF_INET. Fix it! [ 163.801707][ T7069] ip_tables: iptables: counters copy to user failed while replacing table [ 164.010569][ T7077] __nla_validate_parse: 31 callbacks suppressed [ 164.010595][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 164.142926][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 164.269149][ T44] kauditd_printk_skb: 14 callbacks suppressed [ 164.269167][ T44] audit: type=1400 audit(1789187566.864:402): avc: denied { setopt } for pid=7087 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.269758][ T44] audit: type=1400 audit(1789187566.864:403): avc: denied { accept } for pid=7087 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.288449][ T44] audit: type=1400 audit(1789187566.894:404): avc: denied { ioctl } for pid=7087 comm="syz.3.401" path="socket:[16106]" dev="sockfs" ino=16106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.348322][ T44] audit: type=1400 audit(1789187566.944:405): avc: denied { write } for pid=7087 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.929013][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 166.382797][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.416'. [ 166.383345][ T44] audit: type=1400 audit(1789187568.974:406): avc: denied { audit_write } for pid=7128 comm="syz.0.416" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.450902][ T7134] tmpfs: Bad value for 'mpol' [ 166.647973][ T7141] ip_tables: iptables: counters copy to user failed while replacing table [ 166.795186][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 166.798196][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 166.801553][ T7143] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 166.855674][ T7143] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 166.896680][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 166.898327][ T5829] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.906499][ T7143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.002315][ T5801] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.006820][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 167.107319][ T7150] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 167.127871][ T44] audit: type=1400 audit(1789187569.704:407): avc: denied { relabelto } for pid=7149 comm="syz.1.425" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 167.175011][ T44] audit: type=1400 audit(1789187569.754:408): avc: denied { associate } for pid=7149 comm="syz.1.425" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 167.468883][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 167.482392][ T7161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.482411][ T7161] IPv6: NLM_F_CREATE should be set when creating new route [ 167.653539][ T7170] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 167.730020][ T7170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.816553][ T7173] bond2: (slave gretap1): making interface the new active one [ 167.837797][ T7173] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 168.705509][ T44] audit: type=1400 audit(1789187571.304:409): avc: denied { write } for pid=7204 comm="syz.1.443" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 168.736387][ T44] audit: type=1400 audit(1789187571.334:410): avc: denied { getopt } for pid=7204 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.914761][ T7215] ip_tables: iptables: counters copy to user failed while replacing table [ 169.027104][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 169.120032][ T7218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 169.120061][ T7218] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 169.123552][ T7218] vhci_hcd vhci_hcd.0: Device attached [ 169.191747][ T7220] vhci_hcd: connection closed [ 169.194836][ T5829] vhci_hcd vhci_hcd.2: stop threads [ 169.195089][ T5829] vhci_hcd vhci_hcd.2: release socket [ 169.195112][ T5829] vhci_hcd vhci_hcd.2: disconnect device [ 169.200971][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 169.555196][ T44] audit: type=1400 audit(1789187572.144:411): avc: denied { load_policy } for pid=7227 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.559439][ T7228] SELinux: failed to load policy [ 169.614923][ T7231] SELinux: failed to load policy [ 169.683142][ T7235] netlink: 52 bytes leftover after parsing attributes in process `syz.0.452'. [ 169.799211][ T7239] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 169.799236][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 169.799842][ T7239] netlink: 'syz.1.449': attribute type 21 has an invalid length. [ 169.807156][ T44] audit: type=1400 audit(1789187572.404:412): avc: denied { read write } for pid=5752 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.826564][ T44] audit: type=1400 audit(1789187572.424:413): avc: denied { open } for pid=5752 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.826612][ T44] audit: type=1400 audit(1789187572.424:414): avc: denied { ioctl } for pid=5752 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.927515][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 170.080180][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 170.173579][ T7258] tipc: Enabling not permitted [ 170.173609][ T7258] tipc: Enabling of bearer rejected, failed to enable media [ 170.397152][ T44] audit: type=1400 audit(1789187572.994:415): avc: denied { bind } for pid=7264 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.400871][ T44] audit: type=1400 audit(1789187573.004:416): avc: denied { getopt } for pid=7264 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.005723][ T7289] ip_tables: iptables: counters copy to user failed while replacing table [ 171.192655][ T44] audit: type=1400 audit(1789187573.754:417): avc: denied { search } for pid=5450 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.195236][ T44] audit: type=1400 audit(1789187573.754:418): avc: denied { search } for pid=5450 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.195426][ T44] audit: type=1400 audit(1789187573.754:419): avc: denied { search } for pid=5450 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.384500][ T44] audit: type=1400 audit(1789187573.984:420): avc: denied { mounton } for pid=7292 comm="syz.2.467" path="/114/trace" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 171.390358][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 171.718320][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 172.436189][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 172.991648][ T7359] ip_tables: iptables: counters copy to user failed while replacing table [ 173.062720][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 173.078634][ T7368] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1828 sclass=netlink_xfrm_socket pid=7368 comm=syz.2.491 [ 174.167068][ T7394] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 174.348932][ T7404] overlayfs: conflicting options: userxattr,redirect_dir=on [ 174.652990][ T7416] __nla_validate_parse: 2 callbacks suppressed [ 174.653014][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 174.907870][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.103910][ T44] kauditd_printk_skb: 26 callbacks suppressed [ 175.103928][ T44] audit: type=1400 audit(1789187577.684:447): avc: denied { allowed } for pid=7432 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 175.115950][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 175.117485][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 175.118962][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 175.118999][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 175.119039][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.119067][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.119094][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.119119][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.119148][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 175.119175][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 175.120375][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 175.120407][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 175.120443][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.120468][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.120491][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.120512][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.120537][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 175.120561][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 175.121571][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 175.121600][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 175.121632][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.121655][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.121678][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.121700][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.121724][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 175.121747][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 175.124489][ T10] usb 6-1: string descriptor 0 read error: -22 [ 175.124588][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.213616][ T7440] ip_tables: iptables: counters copy to user failed while replacing table [ 175.257601][ T44] audit: type=1400 audit(1789187577.854:448): avc: denied { connect } for pid=7432 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.258875][ T44] audit: type=1400 audit(1789187577.854:449): avc: denied { ioctl } for pid=7432 comm="syz.0.509" path="socket:[17029]" dev="sockfs" ino=17029 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.302491][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 175.442512][ T44] audit: type=1400 audit(1789187578.044:450): avc: denied { create } for pid=7432 comm="syz.0.509" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.443321][ T44] audit: type=1400 audit(1789187578.044:451): avc: denied { map } for pid=7432 comm="syz.0.509" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.443593][ T44] audit: type=1400 audit(1789187578.044:452): avc: denied { read write } for pid=7432 comm="syz.0.509" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.494291][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 175.670702][ T44] audit: type=1326 audit(1789187578.264:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.1.506" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08ad9e159 code=0x0 [ 175.804879][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 176.096874][ T7452] block device autoloading is deprecated and will be removed. [ 176.099861][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 177.065847][ T25] usb 6-1: USB disconnect, device number 6 [ 177.098115][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.099229][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.104830][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.311290][ T7463] ip6gretap0: entered promiscuous mode [ 177.864458][ T7494] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 177.864479][ T7494] Unsupported digest algo: 106 [ 177.919428][ T7491] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 177.919472][ T7491] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 177.919515][ T7491] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 177.981672][ T7491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.015305][ T7491] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.048068][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 178.359041][ T7515] ip_tables: iptables: counters copy to user failed while replacing table [ 178.347622][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 178.581467][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 178.629289][ T7522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.652567][ T7522] bond3: (slave hsr0): The slave device specified does not support setting the MAC address [ 178.653165][ T7522] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 178.653188][ T7522] bond3: (slave hsr0): Error -22 calling dev_set_mtu [ 178.766915][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 178.769872][ T44] audit: type=1400 audit(1789187581.364:454): avc: denied { open } for pid=7526 comm="syz.1.539" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 178.798370][ T44] audit: type=1400 audit(1789187581.394:455): avc: denied { lock } for pid=7526 comm="syz.1.539" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 179.140797][ T7537] capability: warning: `syz.0.542' uses 32-bit capabilities (legacy support in use) [ 179.540105][ T44] audit: type=1400 audit(1789187582.134:456): avc: denied { create } for pid=7546 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.979548][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 180.128812][ T7572] syzkaller0: entered promiscuous mode [ 180.128835][ T7572] syzkaller0: entered allmulticast mode [ 180.177817][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 180.223544][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 180.223565][ T44] audit: type=1400 audit(1789187582.814:460): avc: denied { prog_run } for pid=7578 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.241598][ T7582] ip_tables: iptables: counters copy to user failed while replacing table [ 180.256504][ T7580] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 180.296557][ T44] audit: type=1400 audit(1789187582.894:461): avc: denied { listen } for pid=7578 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.314296][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 180.490533][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 181.017009][ T44] audit: type=1400 audit(1789187583.614:462): avc: denied { write } for pid=7604 comm="syz.1.566" name="usb_gadget" dev="configfs" ino=5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.051910][ T44] audit: type=1400 audit(1789187583.644:463): avc: denied { write } for pid=7604 comm="syz.1.566" name="functions" dev="configfs" ino=19167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.055144][ T44] audit: type=1400 audit(1789187583.654:464): avc: denied { write } for pid=7604 comm="syz.1.566" name="configs" dev="configfs" ino=19168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.058398][ T44] audit: type=1400 audit(1789187583.654:465): avc: denied { write } for pid=7604 comm="syz.1.566" name="c.1" dev="configfs" ino=19175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.059402][ T44] audit: type=1400 audit(1789187583.654:466): avc: denied { create } for pid=7604 comm="syz.1.566" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 181.114166][ T44] audit: type=1400 audit(1789187583.714:467): avc: denied { write } for pid=7604 comm="syz.1.566" name="c.1" dev="configfs" ino=19175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.761935][ T7622] openvswitch: netlink: IP tunnel TTL not specified. [ 181.761964][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.828590][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 182.081272][ T7638] ip_tables: iptables: counters copy to user failed while replacing table [ 182.258618][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 182.313932][ T7644] bridge_slave_0: left allmulticast mode [ 182.313959][ T7644] bridge_slave_0: left promiscuous mode [ 182.315320][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.349049][ T7644] bridge_slave_1: left allmulticast mode [ 182.349080][ T7644] bridge_slave_1: left promiscuous mode [ 182.349256][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.648858][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 182.876000][ T7644] bond0: (slave bond_slave_0): Releasing backup interface [ 182.926744][ T7660] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 183.084943][ T44] audit: type=1400 audit(1789187585.674:468): avc: denied { mount } for pid=7664 comm="syz.1.587" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 183.085895][ T44] audit: type=1400 audit(1789187585.674:469): avc: denied { read write } for pid=7664 comm="syz.1.587" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 183.134602][ T7644] bond0: (slave bond_slave_1): Releasing backup interface [ 183.239592][ T7644] team0: Port device team_slave_1 removed [ 183.240713][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.240732][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.264663][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.264686][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.266427][ T7644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.327740][ T7645] team0: Port device xfrm0 added [ 183.327839][ T7646] tipc: Started in network mode [ 183.327866][ T7646] tipc: Node identity 0a0a30fe2ccf, cluster identity 4711 [ 183.328996][ T7646] tipc: Enabled bearer , priority 0 [ 183.394279][ T42] syz1: Port: 1 Link DOWN [ 183.432550][ T7675] Invalid/unusable pipe [ 183.434725][ T7676] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 183.434725][ T7676] The task syz.2.590 (7676) triggered the difference, watch for misbehavior. [ 183.510578][ T7665] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 183.510604][ T7665] device-mapper: ioctl: error adding target to table [ 183.825656][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 183.900514][ T1042] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 184.054222][ T7697] ip_tables: iptables: counters copy to user failed while replacing table [ 184.084480][ T1042] usb 8-1: Using ep0 maxpacket: 32 [ 184.092124][ T1042] usb 8-1: unable to get BOS descriptor or descriptor too short [ 184.092167][ T1042] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 184.110304][ T1042] usb 8-1: string descriptor 0 read error: -22 [ 184.110388][ T1042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.132974][ T1042] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 184.133010][ T1042] dw2102: su3000_power_ctrl: 1, initialized 0 [ 184.133372][ T1042] dvb-usb: bulk message failed: -22 (2/0) [ 184.221453][ T1042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.222196][ T1042] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 184.222238][ T1042] usb 8-1: media controller created [ 184.222637][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 184.222651][ T1042] dw2102: i2c transfer failed. [ 184.222677][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 184.222688][ T1042] dw2102: i2c transfer failed. [ 184.222699][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 184.222709][ T1042] dw2102: i2c transfer failed. [ 184.222719][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 184.222729][ T1042] dw2102: i2c transfer failed. [ 184.222738][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 184.222748][ T1042] dw2102: i2c transfer failed. [ 184.222758][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 184.222768][ T1042] dw2102: i2c transfer failed. [ 184.222774][ T1042] dvb-usb: MAC address: 02:02:02:02:02:02 [ 184.301574][ T1042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.338685][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.338706][ T1042] dw2102: command 0x0e transfer failed. [ 184.338712][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.338722][ T1042] dw2102: command 0x0e transfer failed. [ 184.392821][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 184.411958][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 184.468511][ T43] tipc: Node number set to 650457342 [ 184.642525][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.642546][ T1042] dw2102: command 0x0e transfer failed. [ 184.642554][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.642563][ T1042] dw2102: command 0x0e transfer failed. [ 184.642568][ T1042] dvb-usb: bulk message failed: -22 (1/0) [ 184.642576][ T1042] dw2102: command 0x51 transfer failed. [ 184.646218][ T7683] dvb-usb: bulk message failed: -22 (4/0) [ 184.646243][ T7683] dw2102: i2c transfer failed. [ 184.753496][ T1042] DVB: Unable to find symbol ds3000_attach() [ 184.753511][ T1042] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 184.860318][ T1042] rc_core: IR keymap rc-su3000 not found [ 184.860335][ T1042] Registered IR keymap rc-empty [ 184.862115][ T1042] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 184.866853][ T1042] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input5 [ 184.878416][ T1042] dvb-usb: schedule remote query interval to 150 msecs. [ 184.878436][ T1042] dw2102: su3000_power_ctrl: 0, initialized 1 [ 184.878447][ T1042] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 184.889306][ T1042] usb 8-1: USB disconnect, device number 12 [ 185.030301][ T7733] __nla_validate_parse: 1 callbacks suppressed [ 185.030322][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 185.169833][ T1042] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 185.333624][ T44] kauditd_printk_skb: 11 callbacks suppressed [ 185.333644][ T44] audit: type=1400 audit(1789187587.934:481): avc: denied { bind } for pid=7739 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.334019][ T44] audit: type=1400 audit(1789187587.934:482): avc: denied { listen } for pid=7739 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.337057][ T44] audit: type=1400 audit(1789187587.934:483): avc: denied { setopt } for pid=7739 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.337633][ T44] audit: type=1400 audit(1789187587.934:484): avc: denied { connect } for pid=7739 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.341206][ T44] audit: type=1400 audit(1789187587.934:485): avc: denied { write } for pid=7739 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.349056][ T44] audit: type=1400 audit(1789187587.954:486): avc: denied { read } for pid=7739 comm="syz.2.611" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.635033][ T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.697516][ T44] audit: type=1400 audit(1789187588.294:487): avc: denied { write } for pid=7757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.826080][ T975] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 185.827088][ T975] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.828370][ T975] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.830743][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.830766][ T975] usb 5-1: Product: syz [ 185.830779][ T975] usb 5-1: Manufacturer: syz [ 185.830793][ T975] usb 5-1: SerialNumber: syz [ 185.918971][ T975] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 185.935462][ T975] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 185.948805][ T975] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 186.004559][ T44] audit: type=1400 audit(1789187588.604:488): avc: denied { write } for pid=7762 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.029860][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 186.211551][ T44] audit: type=1400 audit(1789187588.804:489): avc: denied { write } for pid=7774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.289971][ T44] audit: type=1400 audit(1789187588.884:490): avc: denied { write } for pid=7777 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.408257][ T7782] ip_tables: iptables: counters copy to user failed while replacing table [ 186.509724][ T7785] capability: warning: `syz.2.623' uses deprecated v2 capabilities in a way that may be insecure [ 186.516847][ T7785] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 186.516865][ T7785] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 186.516941][ T7785] overlayfs: failed to set uuid (147/file2, err=-13); falling back to uuid=null. [ 186.672980][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 186.870268][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.626'. [ 187.354023][ T7807] ip_tables: iptables: counters copy to user failed while replacing table [ 187.355289][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 187.730450][ T7819] openvswitch: netlink: Flow key attribute not present in set flow. [ 188.139100][ T7747] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 188.156453][ T42] usb 5-1: USB disconnect, device number 2 [ 188.217146][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 188.240592][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 188.280651][ T42] ti_usb_3410_5052 5-1:2.0: device disconnected [ 188.745007][ T7867] ip_tables: iptables: counters copy to user failed while replacing table [ 188.747784][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 188.783753][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 188.953813][ T7877] binder: 7874:7877 ioctl c00c6211 0 returned -14 [ 188.971669][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 189.273630][ T5761] Bluetooth: hci0: unknown advertising packet type: 0x32 [ 189.292962][ T7895] sg_write: process 411 (syz.0.653) changed security contexts after opening file descriptor, this is not allowed. [ 189.355270][ T7897] deleting an unspecified loop device is not supported. [ 189.997549][ T5761] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 190.035783][ T7896] ima: policy update failed [ 190.143201][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 190.153305][ T7926] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.200992][ T7924] ip_tables: iptables: counters copy to user failed while replacing table [ 190.400563][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 190.487468][ T7937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.671'. [ 190.792795][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 191.379926][ T5761] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 191.426748][ T7965] syzkaller0: entered promiscuous mode [ 191.426779][ T7965] syzkaller0: entered allmulticast mode [ 191.740730][ T7978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.753898][ T7978] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.222389][ T7995] ip_tables: iptables: counters copy to user failed while replacing table [ 192.232985][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 192.301517][ T477] IPVS: starting estimator thread 0... [ 192.309010][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 192.344563][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 192.344585][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 192.344609][ T7998] netlink: 'syz.2.689': attribute type 15 has an invalid length. [ 192.344623][ T7998] netlink: 'syz.2.689': attribute type 18 has an invalid length. [ 192.366397][ T8001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=8001 comm=syz.3.686 [ 192.410459][ T7999] IPVS: using max 26 ests per chain, 62400 per kthread [ 192.606082][ T44] kauditd_printk_skb: 21 callbacks suppressed [ 192.606110][ T44] audit: type=1400 audit(1789187595.204:512): avc: denied { write } for pid=8007 comm="syz.2.692" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.611792][ T44] audit: type=1400 audit(1789187595.204:513): avc: denied { map } for pid=8007 comm="syz.2.692" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.737115][ T44] audit: type=1400 audit(1789187595.334:514): avc: denied { create } for pid=8007 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.758335][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 193.011000][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 193.395119][ T44] audit: type=1400 audit(1789187595.994:515): avc: denied { setopt } for pid=8029 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.564334][ T8039] fuse: Bad value for 'rootmode' [ 193.594284][ T44] audit: type=1400 audit(1789187596.184:516): avc: denied { unlink } for pid=8038 comm="syz.2.701" name="#5" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.699728][ T8039] overlay: filesystem on ./file0 not supported as upperdir [ 193.699887][ T8054] fuse: Bad value for 'rootmode' [ 193.876674][ T44] audit: type=1400 audit(1789187596.474:517): avc: denied { bind } for pid=8055 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.286271][ T8072] ip_tables: iptables: counters copy to user failed while replacing table [ 194.876494][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.094007][ T8082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.925786][ T44] audit: type=1400 audit(1789187598.524:518): avc: denied { map } for pid=8118 comm="syz.3.728" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.951133][ T44] audit: type=1400 audit(1789187598.544:519): avc: denied { create } for pid=8114 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 196.176242][ T8140] ip_tables: iptables: counters copy to user failed while replacing table [ 196.275496][ T8138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 196.490166][ T8146] __nla_validate_parse: 4 callbacks suppressed [ 196.491318][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 196.575057][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 196.845102][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 196.996773][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 197.274398][ T8173] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 197.978308][ T8198] ip_tables: iptables: counters copy to user failed while replacing table [ 198.160825][ T44] audit: type=1400 audit(1789187600.744:520): avc: denied { getopt } for pid=8201 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.536713][ T44] audit: type=1400 audit(1789187601.134:521): avc: denied { ioctl } for pid=8212 comm="syz.1.758" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23616 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.538061][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 198.598793][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 198.599332][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 198.822093][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 198.967477][ T8229] tmpfs: Unknown parameter 'us—î' [ 199.065869][ T44] audit: type=1400 audit(1789187601.654:522): avc: denied { create } for pid=8239 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.068295][ T44] audit: type=1400 audit(1789187601.654:523): avc: denied { connect } for pid=8239 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.070913][ T44] audit: type=1400 audit(1789187601.654:524): avc: denied { write } for pid=8239 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.146031][ T44] audit: type=1400 audit(1789187601.744:525): avc: denied { read } for pid=8239 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.488128][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 199.669465][ T8260] ip_tables: iptables: counters copy to user failed while replacing table [ 199.957836][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 200.139741][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.752356][ T44] audit: type=1400 audit(1789187603.354:526): avc: denied { getopt } for pid=8294 comm="syz.0.791" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.884713][ T8314] ip_tables: iptables: counters copy to user failed while replacing table [ 201.137355][ T44] audit: type=1400 audit(1789187603.734:527): avc: denied { bind } for pid=8321 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.382323][ T8337] syz.0.803 (8337): drop_caches: 2 [ 201.736873][ T8351] __nla_validate_parse: 6 callbacks suppressed [ 201.736894][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 201.885652][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 201.937266][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 202.027408][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 202.064306][ T5828] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.068725][ T5829] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.068767][ T5829] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.071295][ T5829] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.230038][ T8373] ip_tables: iptables: counters copy to user failed while replacing table [ 202.364820][ T44] audit: type=1400 audit(1789187604.964:528): avc: denied { setattr } for pid=8374 comm="syz.0.818" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.505769][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 202.568205][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 203.421102][ T44] audit: type=1400 audit(1789187606.014:529): avc: denied { set_context_mgr } for pid=8413 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 203.423906][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 203.443642][ T8423] ip_tables: iptables: counters copy to user failed while replacing table [ 203.579394][ T44] audit: type=1400 audit(1789187606.174:530): avc: denied { watch_mount } for pid=8426 comm="syz.1.839" path="/243/file0" dev="tmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.590464][ T44] audit: type=1400 audit(1789187606.174:531): avc: denied { mounton } for pid=8413 comm="syz.0.836" path="/195/mnt" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 203.629815][ T8419] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 11 (only 8 groups) [ 203.687383][ T44] audit: type=1400 audit(1789187606.284:532): avc: denied { remount } for pid=8413 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 203.742051][ T8415] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 203.774098][ T44] audit: type=1400 audit(1789187606.374:533): avc: denied { create } for pid=8429 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 203.979289][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 204.008274][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 206.523392][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.523438][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.344566][ T44] audit: type=1400 audit(1789187631.934:534): avc: denied { read write } for pid=8462 comm="syz.3.854" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 229.345001][ T44] audit: type=1400 audit(1789187631.934:535): avc: denied { open } for pid=8462 comm="syz.3.854" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 229.397306][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 229.451154][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 229.794070][ T8495] ip_tables: iptables: counters copy to user failed while replacing table [ 229.838798][ T8497] block nbd1: NBD_DISCONNECT [ 229.903859][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 230.137532][ T44] audit: type=1400 audit(1789187632.734:536): avc: denied { create } for pid=8504 comm="syz.2.866" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.168398][ T44] audit: type=1400 audit(1789187632.774:537): avc: denied { write } for pid=8504 comm="syz.2.866" name="file0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.168458][ T44] audit: type=1400 audit(1789187632.774:538): avc: denied { open } for pid=8504 comm="syz.2.866" path="/211/file0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.177516][ T44] audit: type=1400 audit(1789187632.774:539): avc: denied { ioctl } for pid=8504 comm="syz.2.866" path="/211/file0" dev="tmpfs" ino=1122 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.326537][ T44] audit: type=1400 audit(1789187632.924:540): avc: denied { mount } for pid=8512 comm="syz.3.869" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.333404][ T44] audit: type=1400 audit(1789187632.934:541): avc: denied { unlink } for pid=5755 comm="syz-executor" name="file0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.443088][ T44] audit: type=1400 audit(1789187633.044:542): avc: denied { unmount } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.548695][ T44] audit: type=1400 audit(1789187633.134:543): avc: denied { write } for pid=8520 comm="syz.2.875" name="/" dev="9p" ino=82051145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.610367][ T8529] ip_tables: iptables: counters copy to user failed while replacing table [ 230.821768][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 230.932334][ T8541] netlink: 80 bytes leftover after parsing attributes in process `syz.0.880'. [ 231.129114][ T8551] netlink: 'syz.1.885': attribute type 3 has an invalid length. [ 231.321893][ T8563] sctp: [Deprecated]: syz.1.887 (pid 8563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.321893][ T8563] Use struct sctp_sack_info instead [ 231.365993][ T8563] sctp: [Deprecated]: syz.1.887 (pid 8563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.365993][ T8563] Use struct sctp_sack_info instead [ 231.640366][ T8580] ip_tables: iptables: counters copy to user failed while replacing table [ 232.351606][ T8593] netlink: 'syz.1.895': attribute type 10 has an invalid length. [ 232.735759][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 233.765275][ T8626] ip_tables: iptables: counters copy to user failed while replacing table [ 234.117870][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 235.493071][ T8661] netlink: 'syz.2.918': attribute type 3 has an invalid length. [ 235.538489][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 235.538509][ T44] audit: type=1400 audit(1789187638.124:552): avc: denied { write } for pid=8658 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 236.004397][ T8674] ip_tables: iptables: counters copy to user failed while replacing table [ 236.162674][ T44] audit: type=1400 audit(1789187638.764:553): avc: denied { name_bind } for pid=8670 comm="syz.3.923" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 236.188874][ T1175] Bluetooth: hci5: Frame reassembly failed (-84) [ 236.215103][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 236.542818][ T8682] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.756567][ T8696] FAULT_INJECTION: forcing a failure. [ 236.756567][ T8696] name failslab, interval 1, probability 0, space 0, times 1 [ 236.756601][ T8696] CPU: 0 UID: 0 PID: 8696 Comm: syz.1.929 Not tainted syzkaller #0 PREEMPT(full) [ 236.756625][ T8696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.756637][ T8696] Call Trace: [ 236.756643][ T8696] [ 236.756652][ T8696] dump_stack_lvl+0x100/0x190 [ 236.756704][ T8696] should_fail_ex.cold+0x5/0xa [ 236.756726][ T8696] ? lock_acquire+0x1d1/0x380 [ 236.756747][ T8696] should_failslab+0xc2/0x120 [ 236.756780][ T8696] __kmalloc_cache_noprof+0x91/0x6d0 [ 236.756808][ T8696] ? skb_queue_purge_reason+0x2c2/0x420 [ 236.756839][ T8696] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 236.756880][ T8696] nfc_genl_rcv_nl_event+0xc1/0x300 [ 236.756910][ T8696] notifier_call_chain+0x99/0x3f0 [ 236.756943][ T8696] blocking_notifier_call_chain+0x69/0xa0 [ 236.756979][ T8696] netlink_release+0x1680/0x2000 [ 236.757006][ T8696] ? netlink_release+0x1e0/0x2000 [ 236.757029][ T8696] ? __pfx_netlink_release+0x10/0x10 [ 236.757054][ T8696] ? __pfx_locks_remove_file+0x10/0x10 [ 236.757085][ T8696] __sock_release+0xb3/0x260 [ 236.757107][ T8696] ? __pfx_sock_close+0x10/0x10 [ 236.757131][ T8696] sock_close+0x1c/0x30 [ 236.757154][ T8696] __fput+0x3ff/0xb50 [ 236.757186][ T8696] fput_close_sync+0x118/0x250 [ 236.757214][ T8696] ? __pfx_fput_close_sync+0x10/0x10 [ 236.757249][ T8696] __x64_sys_close+0x8b/0x120 [ 236.757278][ T8696] do_syscall_64+0x123/0x790 [ 236.757310][ T8696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.757333][ T8696] RIP: 0033:0x7fa08ad5e98e [ 236.757352][ T8696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.757373][ T8696] RSP: 002b:00007fa08bc1cf38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 236.757395][ T8696] RAX: ffffffffffffffda RBX: 00007fa08bc1e6c0 RCX: 00007fa08ad5e98e [ 236.757409][ T8696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 236.757421][ T8696] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 236.757433][ T8696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.757445][ T8696] R13: 00007fa08b026038 R14: 00007fa08b025fa0 R15: 00007ffd9f306b98 [ 236.757472][ T8696] [ 237.086705][ T44] audit: type=1400 audit(1789187639.674:554): avc: denied { watch watch_reads } for pid=8700 comm="syz.0.932" path="/220" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.104572][ T8702] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.105343][ T44] audit: type=1400 audit(1789187639.704:555): avc: denied { ioctl } for pid=8700 comm="syz.0.932" path="socket:[23275]" dev="sockfs" ino=23275 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 237.550390][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 237.636220][ T44] audit: type=1400 audit(1789187640.224:556): avc: denied { ioctl } for pid=8717 comm="syz.1.938" path="socket:[23299]" dev="sockfs" ino=23299 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.712015][ T25] usb 5-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 237.712622][ T25] usb 5-1: config 0 has no interfaces? [ 237.712643][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.714658][ T25] usb 5-1: config 0 descriptor?? [ 237.805951][ T8722] netlink: 'syz.1.941': attribute type 30 has an invalid length. [ 237.844389][ T8725] ip_tables: iptables: counters copy to user failed while replacing table [ 237.929710][ T25] usb 5-1: USB disconnect, device number 3 [ 238.190523][ T68] Bluetooth: hci5: command 0x1003 tx timeout [ 238.192617][ T5761] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 238.257848][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 238.467847][ T44] audit: type=1400 audit(1789187641.064:557): avc: denied { ioctl } for pid=8734 comm="syz.2.944" path="socket:[25010]" dev="sockfs" ino=25010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.512370][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.944'. [ 238.580777][ T44] audit: type=1400 audit(1789187641.184:558): avc: denied { getopt } for pid=8734 comm="syz.2.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.662614][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 238.965368][ T44] audit: type=1400 audit(1789187641.554:559): avc: denied { read } for pid=8757 comm="syz.1.952" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.010432][ T44] audit: type=1400 audit(1789187641.554:560): avc: denied { open } for pid=8757 comm="syz.1.952" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.021586][ T44] audit: type=1400 audit(1789187641.614:561): avc: denied { module_load } for pid=8757 comm="syz.1.952" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 239.360781][ T8771] syz.0.955 (8771): /proc/8770/oom_adj is deprecated, please use /proc/8770/oom_score_adj instead. [ 239.448917][ T8774] ip_tables: iptables: counters copy to user failed while replacing table [ 240.077903][ T8783] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 240.077943][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.081304][ T8783] overlay: Unknown parameter 'subj_type' [ 240.597206][ T44] audit: type=1400 audit(1789187643.194:562): avc: denied { setopt } for pid=8791 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.393795][ T8802] ip_tables: iptables: counters copy to user failed while replacing table [ 241.722341][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 241.758259][ T8809] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 241.997489][ T8820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.974'. [ 242.057666][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 243.144270][ T8837] ptrace attach of "/syz-executor exec"[8840] was attempted by "/syz-executor exec"[8837] [ 244.044576][ T8849] netlink: 56 bytes leftover after parsing attributes in process `syz.2.985'. [ 244.271540][ T8854] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 244.900372][ T8869] lo: entered allmulticast mode [ 244.906031][ T8869] tunl0: entered allmulticast mode [ 244.924235][ T8869] gre0: entered allmulticast mode [ 245.028872][ T8869] gretap0: entered allmulticast mode [ 245.115875][ T8869] erspan0: entered allmulticast mode [ 245.170583][ T8869] ip_vti0: entered allmulticast mode [ 245.213070][ T8869] ip6_vti0: entered allmulticast mode [ 245.218601][ T8869] sit0: entered allmulticast mode [ 245.222442][ T8869] ip6tnl0: entered allmulticast mode [ 245.224390][ T8869] ip6gre0: entered allmulticast mode [ 245.309859][ T8869] syz_tun: entered allmulticast mode [ 245.339780][ T8869] ip6gretap0: entered allmulticast mode [ 245.357310][ T8869] vcan0: entered allmulticast mode [ 245.357690][ T8861] gfs2: error -5 reading superblock [ 245.430406][ T8869] bond0: entered allmulticast mode [ 245.436139][ T8869] tipc: Resetting bearer [ 245.439604][ T8869] team0: entered allmulticast mode [ 245.439627][ T8869] xfrm0: entered allmulticast mode [ 245.469546][ T8869] dummy0: entered allmulticast mode [ 245.488378][ T8869] nlmon0: entered allmulticast mode [ 245.489763][ T8869] batadv0: entered allmulticast mode [ 245.492525][ T8869] vxcan0: entered allmulticast mode [ 245.493204][ T8869] vxcan1: entered allmulticast mode [ 245.493930][ T8869] veth0: entered allmulticast mode [ 245.496653][ T8869] veth1: entered allmulticast mode [ 245.560282][ T8869] wg0: entered allmulticast mode [ 245.604823][ T8869] wg1: entered allmulticast mode [ 245.638310][ T8869] wg2: entered allmulticast mode [ 245.651981][ T8869] veth0_to_bridge: entered allmulticast mode [ 245.656800][ T8869] bridge_slave_0: entered allmulticast mode [ 245.658360][ T8869] veth1_to_bridge: entered allmulticast mode [ 245.676748][ T8869] bridge_slave_1: entered allmulticast mode [ 245.716593][ T8869] veth0_to_bond: entered allmulticast mode [ 245.722622][ T8869] bond_slave_0: entered allmulticast mode [ 245.725930][ T8869] veth1_to_bond: entered allmulticast mode [ 245.733654][ T8869] bond_slave_1: entered allmulticast mode [ 245.791721][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 245.804358][ T8869] veth1_to_team: entered allmulticast mode [ 245.806157][ T8869] team_slave_1: entered allmulticast mode [ 245.806378][ T8869] veth0_to_batadv: entered allmulticast mode [ 245.836114][ T8869] batadv_slave_0: entered allmulticast mode [ 245.861957][ T8869] veth1_to_batadv: entered allmulticast mode [ 245.868749][ T8869] batadv_slave_1: entered allmulticast mode [ 245.929388][ T8869] team0: Port device xfrm0 removed [ 245.929803][ T8869] veth0_to_hsr: entered allmulticast mode [ 245.936086][ T8869] hsr_slave_0: entered allmulticast mode [ 245.938953][ T8869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 246.152985][ T8881] macvlan0: entered allmulticast mode [ 246.153006][ T8881] veth1_vlan: entered allmulticast mode [ 246.459593][ T8905] tipc: Started in network mode [ 246.459621][ T8905] tipc: Node identity ffffffff000000000000ffffffffffff, cluster identity 4711 [ 246.459657][ T8905] tipc: Enabling of bearer rejected, failed to enable media [ 246.471360][ T8894] ptrace attach of "/syz-executor exec"[8901] was attempted by "/syz-executor exec"[8894] [ 246.821377][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 246.821411][ T8915] netlink: 'syz.2.998': attribute type 13 has an invalid length. [ 246.821422][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 246.930432][ T5829] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.930473][ T5829] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.930697][ T5829] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.930726][ T5829] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.010866][ T8920] ip_tables: iptables: counters copy to user failed while replacing table [ 247.234779][ T8922] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1002'. [ 247.959513][ T8942] bridge0: port 3(syz_tun) entered blocking state [ 247.959605][ T8942] bridge0: port 3(syz_tun) entered disabled state [ 247.959775][ T8942] syz_tun: entered allmulticast mode [ 247.961780][ T8942] syz_tun: entered promiscuous mode [ 247.962620][ T8942] bridge0: port 3(syz_tun) entered blocking state [ 247.962837][ T8942] bridge0: port 3(syz_tun) entered forwarding state [ 247.983492][ T8942] netlink: 'syz.2.1011': attribute type 12 has an invalid length. [ 248.008402][ T8944] v: renamed from veth0_vlan (while UP) [ 248.248832][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 248.358865][ T8954] ip_tables: iptables: counters copy to user failed while replacing table [ 248.566175][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 248.855992][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1017'. [ 248.936482][ T8971] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 248.955265][ T8971] netlink: 'syz.2.1019': attribute type 21 has an invalid length. [ 248.955473][ T8971] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1019'. [ 249.449996][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 249.560822][ T8981] ip_tables: iptables: counters copy to user failed while replacing table [ 249.561634][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 249.964999][ T44] audit: type=1400 audit(1789187652.564:563): avc: denied { write } for pid=8996 comm="syz.1.1028" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 249.965147][ T44] audit: type=1400 audit(1789187652.564:564): avc: denied { open } for pid=8996 comm="syz.1.1028" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 249.965661][ T44] audit: type=1400 audit(1789187652.564:565): avc: denied { ioctl } for pid=8996 comm="syz.1.1028" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 249.973935][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 250.514823][ T9012] netlink: 'syz.3.1033': attribute type 10 has an invalid length. [ 250.583074][ T44] audit: type=1400 audit(1789187653.174:566): avc: denied { mounton } for pid=9011 comm="syz.0.1036" path="/247/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 250.750133][ T9021] ip_tables: iptables: counters copy to user failed while replacing table [ 251.232007][ T5761] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 251.287578][ T44] audit: type=1400 audit(1789187653.874:567): avc: denied { map } for pid=9038 comm="syz.3.1045" path="socket:[26769]" dev="sockfs" ino=26769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.287641][ T44] audit: type=1400 audit(1789187653.874:568): avc: denied { read write } for pid=9038 comm="syz.3.1045" path="socket:[26769]" dev="sockfs" ino=26769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.333418][ T9039] veth0_to_bridge: left allmulticast mode [ 251.724535][ T9057] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 252.479274][ T9065] vlan2: entered allmulticast mode [ 252.479323][ T9065] dummy0: entered allmulticast mode [ 252.480935][ T9065] team0: Port device vlan2 added [ 252.723604][ T9078] __nla_validate_parse: 5 callbacks suppressed [ 252.723630][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 252.856220][ T9083] bond1: option xmit_hash_policy: invalid value (6) [ 252.887728][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 252.887750][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 252.926811][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 252.959125][ T9083] bond1 (unregistering): Released all slaves [ 252.969339][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 252.969362][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 253.098181][ T44] audit: type=1400 audit(1789187655.694:569): avc: denied { write } for pid=9082 comm="syz.2.1058" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 253.152792][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 253.453676][ T5801] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.453718][ T5801] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.453747][ T5801] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.453776][ T5801] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.765107][ T9095] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.1061/9095 [ 253.765132][ T9095] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 253.765165][ T9095] CPU: 2 UID: 0 PID: 9095 Comm: syz.0.1061 Not tainted syzkaller #0 PREEMPT(full) [ 253.765184][ T9095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.765194][ T9095] Call Trace: [ 253.765200][ T9095] [ 253.765206][ T9095] dump_stack_lvl+0x100/0x190 [ 253.765273][ T9095] check_preemption_disabled+0xd2/0xe0 [ 253.765297][ T9095] ? inet_rtm_getroute+0x1019/0x2690 [ 253.765311][ T9095] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 253.765337][ T9095] ? inet_rtm_getroute+0x1019/0x2690 [ 253.765355][ T9095] trace_kfree_skb+0x18b/0x230 [ 253.765382][ T9095] sk_skb_reason_drop+0xb7/0x1b0 [ 253.765406][ T9095] inet_rtm_getroute+0x1019/0x2690 [ 253.765433][ T9095] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 253.765460][ T9095] ? kasan_quarantine_put+0x104/0x240 [ 253.765497][ T9095] ? kfree_skbmem+0x19a/0x210 [ 253.765521][ T9095] ? kmem_cache_free+0x127/0x6c0 [ 253.765566][ T9095] ? rtnetlink_rcv_msg+0x44b/0xe90 [ 253.765590][ T9095] ? find_held_lock+0x2b/0x80 [ 253.765616][ T9095] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 253.765639][ T9095] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 253.765663][ T9095] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 253.765681][ T9095] rtnetlink_rcv_msg+0x95e/0xe90 [ 253.765706][ T9095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.765737][ T9095] ? ref_tracker_free+0x37e/0x6c0 [ 253.765763][ T9095] netlink_rcv_skb+0x159/0x420 [ 253.765784][ T9095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.765809][ T9095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.765837][ T9095] ? netlink_deliver_tap+0x1ae/0xcc0 [ 253.765872][ T9095] netlink_unicast+0x585/0x850 [ 253.765903][ T9095] ? __pfx_netlink_unicast+0x10/0x10 [ 253.765929][ T9095] netlink_sendmsg+0x8b0/0xda0 [ 253.765952][ T9095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.765974][ T9095] ? selinux_socket_sendmsg+0x198/0x2f0 [ 253.766009][ T9095] sock_write_iter+0x53a/0x5b0 [ 253.766035][ T9095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.766053][ T9095] ? __pfx_sock_write_iter+0x10/0x10 [ 253.766084][ T9095] ? bpf_lsm_file_permission+0x9/0x10 [ 253.766108][ T9095] ? security_file_permission+0x76/0x210 [ 253.766131][ T9095] ? rw_verify_area+0xce/0x6d0 [ 253.766160][ T9095] vfs_write+0x6af/0x1050 [ 253.766179][ T9095] ? __pfx_sock_write_iter+0x10/0x10 [ 253.766207][ T9095] ? __pfx_vfs_write+0x10/0x10 [ 253.766223][ T9095] ? find_held_lock+0x2b/0x80 [ 253.766262][ T9095] ksys_write+0x1f8/0x250 [ 253.766280][ T9095] ? __pfx_ksys_write+0x10/0x10 [ 253.766304][ T9095] do_syscall_64+0x123/0x790 [ 253.766331][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.766350][ T9095] RIP: 0033:0x7f242019e159 [ 253.766366][ T9095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.766384][ T9095] RSP: 002b:00007f2421019028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.766403][ T9095] RAX: ffffffffffffffda RBX: 00007f2420425fa0 RCX: 00007f242019e159 [ 253.766414][ T9095] RDX: 0000000000000035 RSI: 0000200000000280 RDI: 0000000000000006 [ 253.766425][ T9095] RBP: 00007f242023503b R08: 0000000000000000 R09: 0000000000000000 [ 253.766435][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.766446][ T9095] R13: 00007f2420426038 R14: 00007f2420425fa0 R15: 00007ffe279eca78 [ 253.766469][ T9095]