last executing test programs: 1h15m0.741963097s ago: executing program 0 (id=1): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1h14m59.887556783s ago: executing program 0 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES16, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002a005001d0000000000bfa9c605ae8c620ec40500010004000000050015"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) close(0x3) 1h14m59.489542799s ago: executing program 0 (id=4): r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x20020, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6898, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1h14m58.816364092s ago: executing program 0 (id=9): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000380)=""/161) 1h14m58.692092581s ago: executing program 0 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x78fe, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x3ff) 1h14m12.741075233s ago: executing program 32 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x78fe, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x3ff) 55m15.643464576s ago: executing program 2 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x18, 0xfe, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 55m15.27117625s ago: executing program 2 (id=1396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 55m14.38010146s ago: executing program 2 (id=1397): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x8070bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) 55m13.805683278s ago: executing program 2 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55m13.382922165s ago: executing program 2 (id=1399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=@tcp=r0}, 0x20) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 55m13.02206046s ago: executing program 2 (id=1400): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) 54m28.05967333s ago: executing program 33 (id=1400): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) 38m51.652914511s ago: executing program 1 (id=2815): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{&(0x7f0000002ac0)={0xa, 0x4e24, 0x6, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000026900000000b0"], 0xc8}}], 0x1, 0x4000) 38m51.543815549s ago: executing program 1 (id=2817): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)="341c6970826c8d4b5c11b970df9ba99356da67926a9ec3ade529abcdb90bd856d940b30d62502e8bd2da2273e46adca15152c3ada09720c93730f8a240b97dc3ddaf3933416584aeea0849e24c15887cf481a02d1fac21c4741da961105b326e43fc2389a5dac54db82491d54d0f", 0x6e}], 0x1}}], 0x1, 0x4008041) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) shutdown(r0, 0x1) 38m51.020283214s ago: executing program 1 (id=2819): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c3798703970f0000000058000b4824ca94436400940f6a0325010ebc0004000000008000f0fffeff04000053859f6ec50000001000e7ff060c100000000001004e000035", 0x58}], 0x1) 38m50.514159088s ago: executing program 1 (id=2821): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, r1, 0x6}}, 0x48) close(0x3) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) 38m50.395588696s ago: executing program 1 (id=2822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) mprotect(&(0x7f0000234000/0x4000)=nil, 0x4000, 0x5) 38m50.068678648s ago: executing program 1 (id=2824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000080)=0xb, 0x4) 38m4.869533421s ago: executing program 34 (id=2824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000080)=0xb, 0x4) 37m42.38939475s ago: executing program 4 (id=2905): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000140), 0x41, 0xffff971b, 0x200) 37m41.847294936s ago: executing program 4 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}]}}]}, 0x44}}, 0x44094) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 37m41.550322796s ago: executing program 4 (id=2930): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) flock(r0, 0x5) 37m41.32953923s ago: executing program 4 (id=2933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 36m56.099347985s ago: executing program 35 (id=2933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 15m28.618265479s ago: executing program 3 (id=4022): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) 15m27.812295593s ago: executing program 3 (id=4023): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)="10") 15m27.407051999s ago: executing program 3 (id=4025): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @multicast1}, 0x10) 15m27.175324104s ago: executing program 3 (id=4026): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x20, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) 15m26.821441638s ago: executing program 3 (id=4027): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x1, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="7e8e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0xb, 0x2, "b5a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0xe, 0x2, "4011"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m26.537099577s ago: executing program 3 (id=4028): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r3, 0x0, 0x0, 0xfffffff3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) setreuid(0xee00, 0x0) getgid() lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x8d) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) listen(0xffffffffffffffff, 0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) 14m40.811189406s ago: executing program 36 (id=4028): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r3, 0x0, 0x0, 0xfffffff3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) setreuid(0xee00, 0x0) getgid() lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x8d) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) listen(0xffffffffffffffff, 0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) 1m27.413041592s ago: executing program 6 (id=4538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 1m25.90853997s ago: executing program 6 (id=4539): sendto(0xffffffffffffffff, 0x0, 0x0, 0x40050, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_mrelease(r1, 0x0) 44.805543964s ago: executing program 6 (id=4543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 43.597818033s ago: executing program 6 (id=4544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x3, 0x5, 0x7, 0x20400, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0xc}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0xfff0, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101882, 0x124) write$cgroup_int(r7, &(0x7f0000000040)=0x8fc, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xafd}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x1ff, 0x74, &(0x7f0000000300)=""/116, 0x41100, 0x75, '\x00', r5, @fallback=0x30, r6, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x10, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x2, 0x1, 0x4}, {0x4, 0x2, 0x0, 0x2}, {0x0, 0x2, 0x9, 0x9}, {0x2, 0x1, 0x10, 0x6}, {0x4, 0x3, 0xd}, {0x1, 0x3, 0x7, 0x196184950704d1b7}, {0x1, 0x4, 0x7, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 22.420810911s ago: executing program 5 (id=4547): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0xfffd, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1d}, {0x0, 0xf, 0x0, 0x8000002dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x3501, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x3, 0x2, 0x0, 0x0, 0x3}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc881}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 21.318843584s ago: executing program 5 (id=4548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 20.859167553s ago: executing program 5 (id=4549): creat(&(0x7f00000001c0)='./file0\x00', 0x16c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 20.75795565s ago: executing program 5 (id=4550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1000042, @private1={0xfc, 0x1, '\x00', 0xa}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 12.22129065s ago: executing program 6 (id=4551): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) 11.789904838s ago: executing program 6 (id=4552): socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0xe8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2d, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.348727292s ago: executing program 5 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 0s ago: executing program 5 (id=4554): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x8001, 0xc09, 0x1, 0x400, 0x1, 0x1, 0x4, 0x4, 0x5c, 0xfd, 0x1002, 0x8, 0xb, 0x800, 0x6, 0xffffffff, 0x7, 0x400, 0x2, 0x40000003, 0x89, 0x2, 0xf27, 0x4, 0x7, 0x10000008, 0xf, 0x7, 0x4, 0xfffe, 0xfffffff8]}) kernel console output (not intermixed with test programs): "socket:[19710]" dev="sockfs" ino=19710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1510.783149][ T28] audit: type=1400 audit(1510.700:615): avc: denied { getopt } for pid=11962 comm="syz.3.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1517.953224][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 1518.433467][T12016] ======================================================= [ 1518.433467][T12016] WARNING: The mand mount option has been deprecated and [ 1518.433467][T12016] and is ignored by this kernel. Remove the mand [ 1518.433467][T12016] option from the mount to silence this warning. [ 1518.433467][T12016] ======================================================= [ 1521.483203][T12024] netlink: 'syz.1.1824': attribute type 9 has an invalid length. [ 1522.825069][ T28] audit: type=1400 audit(1522.740:616): avc: denied { mount } for pid=12037 comm="syz.3.1830" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1524.136751][ T28] audit: type=1326 audit(1524.050:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.1833" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1524.137169][ T28] audit: type=1326 audit(1524.050:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.1833" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1524.162422][ T28] audit: type=1326 audit(1524.080:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.1833" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1524.163351][ T28] audit: type=1326 audit(1524.080:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm=8B5E exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1524.163865][ T28] audit: type=1326 audit(1524.080:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm=8B5E exe="/syz-executor" sig=0 arch=40000028 syscall=383 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1524.164502][ T28] audit: type=1326 audit(1524.080:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm=8B5E exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1524.164652][ T28] audit: type=1326 audit(1524.080:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm=8B5E exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1525.308270][ T28] audit: type=1326 audit(1525.220:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.1837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1525.331956][ T28] audit: type=1326 audit(1525.250:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.1837" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1527.360366][T12070] netlink: 'syz.3.1843': attribute type 4 has an invalid length. [ 1530.212191][T12085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.966029][T12087] ip6gre1: entered allmulticast mode [ 1532.929412][T12100] lo: entered promiscuous mode [ 1532.943805][T12100] tunl0: entered promiscuous mode [ 1533.012359][T12100] gre0: entered promiscuous mode [ 1533.032011][T12100] gretap0: entered promiscuous mode [ 1533.039595][T12100] erspan0: entered promiscuous mode [ 1533.057385][T12100] ip_vti0: entered promiscuous mode [ 1533.066057][T12100] ip6_vti0: entered promiscuous mode [ 1533.077870][T12100] sit0: entered promiscuous mode [ 1533.095814][T12100] ip6tnl0: entered promiscuous mode [ 1533.104384][T12100] ip6gre0: entered promiscuous mode [ 1533.124182][T12100] syz_tun: entered promiscuous mode [ 1533.132840][T12100] ip6gretap0: entered promiscuous mode [ 1533.147571][T12100] vcan0: entered promiscuous mode [ 1533.153877][T12100] bond0: entered promiscuous mode [ 1533.155061][T12100] bond_slave_0: entered promiscuous mode [ 1533.156616][T12100] bond_slave_1: entered promiscuous mode [ 1533.167058][T12100] dummy0: entered promiscuous mode [ 1533.194563][T12100] nlmon0: entered promiscuous mode [ 1533.223013][T12100] vxcan0: entered promiscuous mode [ 1533.228642][T12100] vxcan1: entered promiscuous mode [ 1533.274921][T12100] veth0: entered promiscuous mode [ 1533.293107][T12100] veth1: entered promiscuous mode [ 1533.306642][T12100] wg0: entered promiscuous mode [ 1533.322505][T12100] wg1: entered promiscuous mode [ 1533.343100][T12100] wg2: entered promiscuous mode [ 1533.349618][T12100] veth0_to_bridge: entered promiscuous mode [ 1533.365375][T12100] bridge_slave_0: entered promiscuous mode [ 1533.371887][T12100] veth1_to_bridge: entered promiscuous mode [ 1533.382709][T12100] bridge_slave_1: entered promiscuous mode [ 1533.387498][T12100] veth0_to_bond: entered promiscuous mode [ 1533.400126][T12100] veth1_to_bond: entered promiscuous mode [ 1533.414439][T12100] veth1_to_team: entered promiscuous mode [ 1533.424373][T12100] team_slave_1: entered promiscuous mode [ 1533.427720][T12100] veth0_to_batadv: entered promiscuous mode [ 1533.443996][T12100] batadv_slave_0: left allmulticast mode [ 1533.446063][T12100] veth1_to_batadv: entered promiscuous mode [ 1533.453424][T12100] batadv_slave_1: entered promiscuous mode [ 1533.458776][T12100] xfrm0: entered promiscuous mode [ 1533.467607][T12100] veth0_to_hsr: entered promiscuous mode [ 1533.488412][T12100] veth1_to_hsr: entered promiscuous mode [ 1533.506502][T12100] hsr0: entered promiscuous mode [ 1533.524021][T12100] veth1_virt_wifi: entered promiscuous mode [ 1533.529598][T12100] veth0_virt_wifi: entered promiscuous mode [ 1533.578762][T12100] vlan0: entered promiscuous mode [ 1533.588665][T12100] vlan1: entered promiscuous mode [ 1533.593093][T12100] macvlan0: entered promiscuous mode [ 1533.596293][T12100] macvlan1: entered promiscuous mode [ 1533.603052][T12100] ipvlan0: entered promiscuous mode [ 1533.606195][T12100] ipvlan1: entered promiscuous mode [ 1533.616702][T12100] macvtap0: entered promiscuous mode [ 1533.622968][T12100] macsec0: entered promiscuous mode [ 1533.642418][T12100] geneve0: entered promiscuous mode [ 1533.649183][T12100] geneve1: entered promiscuous mode [ 1533.660384][T12100] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1533.666282][T12100] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1533.680177][T12100] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1533.692150][T12100] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1533.694647][T12100] macvlan2: entered promiscuous mode [ 1533.696450][ T130] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.696789][ T130] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.697008][ T130] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.697091][ T130] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.492427][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 1550.915159][T12167] fuse: Bad value for 'fd' [ 1553.114332][ T28] kauditd_printk_skb: 188 callbacks suppressed [ 1553.114683][ T28] audit: type=1400 audit(1553.030:814): avc: denied { create } for pid=12188 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1556.558898][ T28] audit: type=1400 audit(1556.470:815): avc: denied { create } for pid=12207 comm="syz.1.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1562.697926][ T28] audit: type=1400 audit(1562.610:816): avc: denied { getopt } for pid=12339 comm="syz.1.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1562.987717][T12346] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 1563.011678][T12346] bond1: entered promiscuous mode [ 1563.012967][T12346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1563.064706][T12346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1563.066892][T12346] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1563.067760][T12346] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1563.073087][T12346] bond1: (slave gre1): making interface the new active one [ 1563.075135][T12346] gre1: entered promiscuous mode [ 1563.081790][T12346] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1563.196204][ T28] audit: type=1400 audit(1563.110:817): avc: denied { lock } for pid=12384 comm="syz.1.1950" path="socket:[20906]" dev="sockfs" ino=20906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1573.629756][T12404] : renamed from vlan0 [ 1574.455195][T12410] syzkaller0: entered promiscuous mode [ 1574.459642][T12410] syzkaller0: entered allmulticast mode [ 1602.841823][T11716] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1603.015272][T11716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.015502][T11716] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1603.015668][T11716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1603.015773][T11716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1603.015865][T11716] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1603.040342][T11716] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1603.040911][T11716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1603.041087][T11716] usb 2-1: Product: syz [ 1603.041174][T11716] usb 2-1: Manufacturer: syz [ 1603.041261][T11716] usb 2-1: SerialNumber: syz [ 1603.044471][T11716] usb 2-1: config 0 descriptor?? [ 1603.236211][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1980'. [ 1603.238595][T12471] bridge_slave_1: entered promiscuous mode [ 1603.308395][T11716] usb 2-1: USB disconnect, device number 57 [ 1606.002994][T12495] syzkaller0: entered promiscuous mode [ 1606.005134][T12495] syzkaller0: entered allmulticast mode [ 1609.137439][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1614.878572][T12507] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1614.879148][T12507] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1614.879248][T12507] netlink: 'syz.3.1988': attribute type 5 has an invalid length. [ 1614.879287][T12507] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1614.992381][T12509] fuse: Bad value for 'group_id' [ 1614.996933][T12509] fuse: Bad value for 'group_id' [ 1615.497869][T12519] fuse: Bad value for 'group_id' [ 1615.498311][T12519] fuse: Bad value for 'group_id' [ 1617.269528][T12529] fuse: Bad value for 'group_id' [ 1617.271607][T12529] fuse: Bad value for 'group_id' [ 1617.363375][ T28] audit: type=1400 audit(1617.280:818): avc: denied { mount } for pid=12530 comm="syz.1.2000" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1623.427403][ T28] audit: type=1400 audit(1623.340:819): avc: denied { create } for pid=12539 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1623.442572][ T28] audit: type=1400 audit(1623.360:820): avc: denied { bind } for pid=12539 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1623.512178][ T28] audit: type=1400 audit(1623.430:821): avc: denied { execute } for pid=12534 comm="syz.3.2002" name="cgroup" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1625.017414][ T6770] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1625.202241][ T6770] usb 2-1: Using ep0 maxpacket: 16 [ 1625.221709][ T6770] usb 2-1: config 14 has an invalid interface number: 37 but max is 0 [ 1625.222452][ T6770] usb 2-1: config 14 has no interface number 0 [ 1625.223230][ T6770] usb 2-1: config 14 interface 37 has no altsetting 0 [ 1625.233105][ T6770] usb 2-1: language id specifier not provided by device, defaulting to English [ 1625.306128][ T6770] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=a7.4a [ 1625.307396][ T6770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.308521][ T6770] usb 2-1: Product: 鹸玠衯ܚ髼삺㪆ᾅڗᶩ [ 1625.309492][ T6770] usb 2-1: SerialNumber: syz [ 1625.548738][ T6770] usb 2-1: USB disconnect, device number 58 [ 1639.283636][T11716] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1639.460834][T11716] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1639.461106][T11716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.461306][T11716] usb 2-1: Product: syz [ 1639.461397][T11716] usb 2-1: Manufacturer: syz [ 1639.461422][T11716] usb 2-1: SerialNumber: syz [ 1639.466698][T11716] usb 2-1: config 0 descriptor?? [ 1641.388344][T12613] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2026'. [ 1648.049237][T12628] bond0: left promiscuous mode [ 1648.049759][T12628] bond_slave_0: left promiscuous mode [ 1648.065969][T12628] bond_slave_1: left promiscuous mode [ 1648.478349][T12628] sit1: left allmulticast mode [ 1648.499463][T12628] ip6gre1: left allmulticast mode [ 1649.701899][T11716] usb 2-1: USB disconnect, device number 59 [ 1650.803182][ T739] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1650.966157][ T739] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1650.966557][ T739] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1650.966904][ T739] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1650.967033][ T739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.191395][ T739] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1651.207944][ T739] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 1651.216920][ T739] input: failed to attach handler kbd to device input7, error: -5 [ 1651.239557][ T739] usb 2-1: USB disconnect, device number 60 [ 1651.872211][T12670] fuse: Unknown parameter 'grou00000000000000000000' [ 1666.967797][T12686] fuse: Unknown parameter 'grou00000000000000000000' [ 1667.169696][T12689] netlink: 'syz.1.2043': attribute type 2 has an invalid length. [ 1669.217496][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1676.132269][T12700] fuse: Unknown parameter 'grou00000000000000000000' [ 1677.475207][ T28] audit: type=1326 audit(1677.390:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.3.2050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7fc00000 [ 1677.794069][T12712] fuse: Unknown parameter 'group_i00000000000000000000' [ 1678.945717][ T28] audit: type=1326 audit(1678.860:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.3.2050" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x12fc20 code=0x7fc00000 [ 1680.681275][T12722] fuse: Unknown parameter 'group_i00000000000000000000' [ 1683.358109][T12737] fuse: Unknown parameter 'group_i00000000000000000000' [ 1685.322648][ T28] audit: type=1400 audit(1685.230:824): avc: denied { accept } for pid=12739 comm="syz.1.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1699.430344][T12751] fuse: Unknown parameter 'group_id00000000000000000000' [ 1700.798572][ T28] audit: type=1400 audit(1700.710:825): avc: denied { getopt } for pid=12754 comm="syz.1.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1702.914546][T12779] fuse: Unknown parameter 'group_id00000000000000000000' [ 1715.195849][T12797] fuse: Unknown parameter 'group_id00000000000000000000' [ 1715.572088][T11833] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1715.771615][T11833] usb 2-1: Using ep0 maxpacket: 32 [ 1715.854856][T11833] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1715.855301][T11833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.855650][T11833] usb 2-1: Product: syz [ 1715.855705][T11833] usb 2-1: Manufacturer: syz [ 1715.855733][T11833] usb 2-1: SerialNumber: syz [ 1715.866524][T11833] usb 2-1: config 0 descriptor?? [ 1717.115980][ T6770] usb 2-1: USB disconnect, device number 61 [ 1718.021962][T12822] fuse: Bad value for 'user_id' [ 1718.022497][T12822] fuse: Bad value for 'user_id' [ 1720.536315][T12837] fuse: Bad value for 'user_id' [ 1720.536716][T12837] fuse: Bad value for 'user_id' [ 1720.633172][ T28] audit: type=1400 audit(1720.550:826): avc: denied { read } for pid=12830 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1720.683388][T12833] random: crng reseeded on system resumption [ 1729.562062][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1729.658834][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1729.659712][T12847] nbd: device at index 64 is going down [ 1729.827492][T12855] fuse: Bad value for 'user_id' [ 1729.832441][T12855] fuse: Bad value for 'user_id' [ 1740.188426][T12873] fuse: Bad value for 'fd' [ 1740.397346][T12877] comedi: valid board names for 8255 driver are: [ 1740.398372][T12877] 8255 [ 1740.399925][T12877] comedi: valid board names for vmk80xx driver are: [ 1740.402204][T12877] vmk80xx [ 1740.404064][T12877] comedi: valid board names for usbduxsigma driver are: [ 1740.405452][T12877] usbduxsigma [ 1740.408287][T12877] comedi: valid board names for usbduxfast driver are: [ 1740.409122][T12877] usbduxfast [ 1740.409863][T12877] comedi: valid board names for usbdux driver are: [ 1740.413288][T12877] usbdux [ 1740.414013][T12877] comedi: valid board names for ni6501 driver are: [ 1740.415556][T12877] ni6501 [ 1740.416449][T12877] comedi: valid board names for dt9812 driver are: [ 1740.417250][T12877] dt9812 [ 1740.418019][T12877] comedi: valid board names for ni_labpc_cs driver are: [ 1740.419157][T12877] ni_labpc_cs [ 1740.419995][T12877] comedi: valid board names for ni_daq_700 driver are: [ 1740.421726][T12877] ni_daq_700 [ 1740.422595][T12877] comedi: valid board names for labpc_pci driver are: [ 1740.423355][T12877] labpc_pci [ 1740.424630][T12877] comedi: valid board names for adl_pci9118 driver are: [ 1740.425955][T12877] pci9118dg [ 1740.427431][T12877] pci9118hg [ 1740.428333][T12877] pci9118hr [ 1740.429163][T12877] comedi: valid board names for 8255_pci driver are: [ 1740.430078][T12877] 8255_pci [ 1740.430506][T12877] comedi: valid board names for comedi_parport driver are: [ 1740.432095][T12877] comedi_parport [ 1740.432895][T12877] comedi: valid board names for comedi_test driver are: [ 1740.433890][T12877] comedi_test [ 1740.434337][T12877] comedi: valid board names for comedi_bond driver are: [ 1740.435171][T12877] comedi_bond [ 1741.316458][T12891] fuse: Bad value for 'fd' [ 1742.033895][T12903] fuse: Bad value for 'fd' [ 1744.991273][ T739] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1745.171761][ T739] usb 2-1: Using ep0 maxpacket: 8 [ 1745.178827][ T739] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1745.179205][ T739] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1745.179340][ T739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.185003][ T739] usb 2-1: config 0 descriptor?? [ 1745.395316][T11833] usb 2-1: USB disconnect, device number 62 [ 1745.931639][T11833] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1746.091683][T11833] usb 2-1: Using ep0 maxpacket: 32 [ 1746.099652][T11833] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1746.099964][T11833] usb 2-1: config 0 has no interface number 0 [ 1746.100183][T11833] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1746.132248][T11833] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1746.132709][T11833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.133008][T11833] usb 2-1: Product: syz [ 1746.133167][T11833] usb 2-1: Manufacturer: syz [ 1746.133320][T11833] usb 2-1: SerialNumber: syz [ 1746.138744][T11833] usb 2-1: config 0 descriptor?? [ 1746.153255][T11833] smsc75xx v1.0.0 [ 1746.153842][T11833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1746.154466][T11833] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1746.363147][T11833] usb 2-1: USB disconnect, device number 63 [ 1746.684862][T12944] fuse: Bad value for 'fd' [ 1761.642692][ T28] audit: type=1400 audit(1761.550:827): avc: denied { read } for pid=12954 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1763.078851][T12960] fuse: Bad value for 'fd' [ 1772.843856][T12976] tmpfs: Unsupported parameter 'huge' [ 1773.433528][T12980] fuse: Bad value for 'fd' [ 1773.861126][T11610] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1774.020281][T11610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.021033][T11610] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1774.030250][T11610] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1774.030475][T11610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1774.030952][T11610] usb 2-1: Product: syz [ 1774.031057][T11610] usb 2-1: Manufacturer: syz [ 1774.031200][T11610] usb 2-1: SerialNumber: syz [ 1774.036222][T11610] usb 2-1: config 0 descriptor?? [ 1774.044177][T11610] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1774.255723][T11716] usb 2-1: USB disconnect, device number 64 [ 1781.279975][T13004] fuse: Invalid rootmode [ 1781.479577][ T28] audit: type=1400 audit(1781.390:828): avc: denied { mount } for pid=13005 comm="syz.3.2130" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1784.676289][T13018] fuse: Invalid rootmode [ 1786.485025][T13020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13020 comm=syz.1.2135 [ 1798.466229][T13055] fuse: Invalid rootmode [ 1799.439512][T13065] fuse: Bad value for 'rootmode' [ 1804.976014][T13078] fuse: Bad value for 'rootmode' [ 1808.451888][T13089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2152'. [ 1820.201769][T13097] fuse: Bad value for 'rootmode' [ 1829.128220][T13113] fuse: Unknown parameter 'use00000000000000000000' [ 1829.809492][T13123] fuse: Unknown parameter 'use00000000000000000000' [ 1830.682627][T13135] fuse: Unknown parameter 'use00000000000000000000' [ 1831.229260][T13145] fuse: Unknown parameter 'user_i00000000000000000000' [ 1832.386465][ T28] audit: type=1400 audit(1832.300:829): avc: denied { map } for pid=13159 comm="syz.3.2180" path="/424" dev="tmpfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1840.792788][T13235] netlink: 'syz.3.2211': attribute type 1 has an invalid length. [ 1841.047681][T13235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1841.456179][T13272] vlan2: entered allmulticast mode [ 1841.461704][T13272] veth0_to_bond: entered allmulticast mode [ 1845.484467][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1846.099789][T13314] fuse: Unknown parameter '0x0000000000000004' [ 1847.857292][T13331] fuse: Unknown parameter '0x0000000000000004' [ 1848.952349][T13346] fuse: Unknown parameter '0x0000000000000004' [ 1850.761391][T13358] fuse: Unknown parameter '0x0000000000000004' [ 1851.287752][ T28] audit: type=1400 audit(1851.200:830): avc: denied { create } for pid=13359 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1853.854926][T13370] fuse: Unknown parameter '0x0000000000000004' [ 1855.108077][T13383] veth1_to_bond: mtu less than device minimum [ 1858.630301][T13410] netlink: 'syz.1.2271': attribute type 21 has an invalid length. [ 1858.630924][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 1858.646134][T13410] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1859.055646][T13416] veth1_to_bond: mtu greater than device maximum [ 1862.277122][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2285'. [ 1868.193413][T13495] netlink: 'syz.1.2303': attribute type 1 has an invalid length. [ 1868.547953][T13495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1880.247867][ T28] audit: type=1400 audit(1880.160:831): avc: denied { write } for pid=13560 comm="syz.1.2315" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1900.009775][T13598] : renamed from vlan0 (while UP) [ 1900.797783][T13605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2328'. [ 1901.364260][ T28] audit: type=1400 audit(1901.280:832): avc: denied { ioctl } for pid=13604 comm="syz.3.2328" path="socket:[24630]" dev="sockfs" ino=24630 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1912.561426][T13634] syzkaller0: entered promiscuous mode [ 1912.565709][T13634] syzkaller0: entered allmulticast mode [ 1925.665025][T13653] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2344'. [ 1925.671722][ T28] audit: type=1400 audit(1925.580:833): avc: denied { nlmsg_read } for pid=13652 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1937.295358][T13682] fuse: Bad value for 'fd' [ 1940.445490][T13688] lo: left promiscuous mode [ 1940.450108][T13688] lo: entered allmulticast mode [ 1940.455490][T13688] tunl0: left promiscuous mode [ 1940.458726][T13688] tunl0: entered allmulticast mode [ 1940.463538][T13688] gre0: left promiscuous mode [ 1940.464729][T13688] gre0: entered allmulticast mode [ 1940.467355][T13688] gretap0: left promiscuous mode [ 1940.473030][T13688] gretap0: entered allmulticast mode [ 1940.475144][T13688] erspan0: left promiscuous mode [ 1940.478098][T13688] erspan0: entered allmulticast mode [ 1940.480686][T13688] ip_vti0: left promiscuous mode [ 1940.485452][T13688] ip_vti0: entered allmulticast mode [ 1940.487133][T13688] ip6_vti0: left promiscuous mode [ 1940.491235][T13688] ip6_vti0: entered allmulticast mode [ 1940.492941][T13688] sit0: left promiscuous mode [ 1940.494870][T13688] sit0: entered allmulticast mode [ 1940.497430][T13688] ip6tnl0: left promiscuous mode [ 1940.500224][T13688] ip6tnl0: entered allmulticast mode [ 1940.502474][T13688] ip6gre0: left promiscuous mode [ 1940.503587][T13688] ip6gre0: entered allmulticast mode [ 1940.507203][T13688] syz_tun: left promiscuous mode [ 1940.508222][T13688] syz_tun: entered allmulticast mode [ 1940.509291][T13688] ip6gretap0: left promiscuous mode [ 1940.510106][T13688] ip6gretap0: entered allmulticast mode [ 1940.511959][T13688] vcan0: left promiscuous mode [ 1940.512977][T13688] vcan0: entered allmulticast mode [ 1940.514155][T13688] bond0: left promiscuous mode [ 1940.515803][T13688] bond0: entered allmulticast mode [ 1940.518015][T13688] bond_slave_0: entered allmulticast mode [ 1940.519366][T13688] bond_slave_1: entered allmulticast mode [ 1940.522325][T13688] dummy0: left promiscuous mode [ 1940.523395][T13688] dummy0: entered allmulticast mode [ 1940.525562][T13688] nlmon0: left promiscuous mode [ 1940.526685][T13688] nlmon0: entered allmulticast mode [ 1940.528252][T13688] vxcan0: left promiscuous mode [ 1940.531465][T13688] vxcan0: entered allmulticast mode [ 1940.533315][T13688] vxcan1: left promiscuous mode [ 1940.534279][T13688] vxcan1: entered allmulticast mode [ 1940.535469][T13688] veth0: left promiscuous mode [ 1940.536319][T13688] veth0: entered allmulticast mode [ 1940.537397][T13688] veth1: left promiscuous mode [ 1940.538187][T13688] veth1: entered allmulticast mode [ 1940.539225][T13688] wg0: left promiscuous mode [ 1940.539974][T13688] wg0: entered allmulticast mode [ 1940.541850][T13688] wg1: left promiscuous mode [ 1940.543365][T13688] wg1: entered allmulticast mode [ 1940.544762][T13688] wg2: left promiscuous mode [ 1940.545918][T13688] wg2: entered allmulticast mode [ 1940.546967][T13688] veth0_to_bridge: left promiscuous mode [ 1940.547944][T13688] veth0_to_bridge: entered allmulticast mode [ 1940.549290][T13688] bridge_slave_0: left promiscuous mode [ 1940.550306][T13688] bridge_slave_0: entered allmulticast mode [ 1940.551838][T13688] veth1_to_bridge: left promiscuous mode [ 1940.552661][T13688] veth1_to_bridge: entered allmulticast mode [ 1940.554793][T13688] bridge_slave_1: left promiscuous mode [ 1940.557037][T13688] bridge_slave_1: entered allmulticast mode [ 1940.558550][T13688] veth0_to_bond: left promiscuous mode [ 1940.559482][T13688] veth0_to_bond: entered allmulticast mode [ 1940.561199][T13688] bond_slave_0: left promiscuous mode [ 1940.562478][T13688] veth1_to_bond: left promiscuous mode [ 1940.563337][T13688] veth1_to_bond: entered allmulticast mode [ 1940.564376][T13688] bond_slave_1: left promiscuous mode [ 1940.565709][T13688] veth1_to_team: left promiscuous mode [ 1940.566551][T13688] veth1_to_team: entered allmulticast mode [ 1940.568422][T13688] team_slave_1: left promiscuous mode [ 1940.569184][T13688] team_slave_1: entered allmulticast mode [ 1940.570308][T13688] veth0_to_batadv: left promiscuous mode [ 1940.571757][T13688] veth0_to_batadv: entered allmulticast mode [ 1940.573237][T13688] batadv_slave_0: left promiscuous mode [ 1940.574186][T13688] batadv_slave_0: entered allmulticast mode [ 1940.575299][T13688] veth1_to_batadv: left promiscuous mode [ 1940.576109][T13688] veth1_to_batadv: entered allmulticast mode [ 1940.577222][T13688] batadv_slave_1: left promiscuous mode [ 1940.578765][T13688] batadv_slave_1: entered allmulticast mode [ 1940.579950][T13688] xfrm0: left promiscuous mode [ 1940.581458][T13688] xfrm0: entered allmulticast mode [ 1940.583383][T13688] veth0_to_hsr: left promiscuous mode [ 1940.585068][T13688] veth0_to_hsr: entered allmulticast mode [ 1940.586812][T13688] hsr_slave_0: entered allmulticast mode [ 1940.587848][T13688] veth1_to_hsr: left promiscuous mode [ 1940.588649][T13688] veth1_to_hsr: entered allmulticast mode [ 1940.590507][T13688] hsr_slave_1: entered allmulticast mode [ 1940.591891][T13688] hsr0: left promiscuous mode [ 1940.592652][T13688] hsr0: entered allmulticast mode [ 1940.593832][T13688] veth1_virt_wifi: left promiscuous mode [ 1940.594732][T13688] veth1_virt_wifi: entered allmulticast mode [ 1940.595961][T13688] veth0_virt_wifi: left promiscuous mode [ 1940.596784][T13688] veth0_virt_wifi: entered allmulticast mode [ 1940.597898][T13688] veth1_vlan: entered allmulticast mode [ 1940.599283][T13688] veth0_vlan: entered allmulticast mode [ 1940.602327][T13688] : left promiscuous mode [ 1940.604642][T13688] : entered allmulticast mode [ 1940.607283][T13688] vlan1: left promiscuous mode [ 1940.609526][T13688] vlan1: entered allmulticast mode [ 1940.612366][T13688] macvlan0: left promiscuous mode [ 1940.613284][T13688] macvlan0: entered allmulticast mode [ 1940.615290][T13688] macvlan1: left promiscuous mode [ 1940.616402][T13688] macvlan1: entered allmulticast mode [ 1940.617455][T13688] ipvlan0: left promiscuous mode [ 1940.618204][T13688] ipvlan0: entered allmulticast mode [ 1940.619294][T13688] ipvlan1: left promiscuous mode [ 1940.620112][T13688] ipvlan1: entered allmulticast mode [ 1940.621691][T13688] veth1_macvtap: entered allmulticast mode [ 1940.622883][T13688] veth0_macvtap: entered allmulticast mode [ 1940.624006][T13688] macvtap0: left promiscuous mode [ 1940.624751][T13688] macvtap0: entered allmulticast mode [ 1940.626478][T13688] macsec0: left promiscuous mode [ 1940.627302][T13688] macsec0: entered allmulticast mode [ 1940.628352][T13688] geneve0: left promiscuous mode [ 1940.629177][T13688] geneve0: entered allmulticast mode [ 1940.630293][T13688] geneve1: left promiscuous mode [ 1940.631654][T13688] geneve1: entered allmulticast mode [ 1940.633427][T13688] macvlan2: left promiscuous mode [ 1940.634307][T13688] macvlan2: entered allmulticast mode [ 1940.635415][T13688] ip6tnl1: entered allmulticast mode [ 1940.637746][T13688] bond1: left promiscuous mode [ 1940.641221][T13688] gre1: left promiscuous mode [ 1940.642839][T13688] bond1: entered allmulticast mode [ 1940.643954][T13688] gre1: entered allmulticast mode [ 1940.653321][T13688] netdevsim netdevsim1 eth0: entered allmulticast mode [ 1940.654973][T13688] netdevsim netdevsim1 eth1: entered allmulticast mode [ 1940.657629][T13688] netdevsim netdevsim1 eth2: entered allmulticast mode [ 1940.661392][T13688] netdevsim netdevsim1 eth3: entered allmulticast mode [ 1940.665222][T13688] gtp0: entered allmulticast mode [ 1940.673253][T13688] bond2: entered allmulticast mode [ 1946.641271][ T3694] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1946.796375][ T3694] usb 2-1: config 0 has no interfaces? [ 1946.807564][ T3694] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1946.807943][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.808813][ T3694] usb 2-1: Product: syz [ 1946.808906][ T3694] usb 2-1: Manufacturer: syz [ 1946.808968][ T3694] usb 2-1: SerialNumber: syz [ 1946.824756][ T3694] usb 2-1: config 0 descriptor?? [ 1947.438611][ T3694] usb 2-1: USB disconnect, device number 65 [ 1958.750059][T13795] syzkaller0: entered promiscuous mode [ 1958.756432][T13795] syzkaller0: entered allmulticast mode [ 1959.018181][ T28] audit: type=1400 audit(1958.930:834): avc: denied { setopt } for pid=13800 comm="syz.1.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1966.157208][T13852] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 1967.398884][T13862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1967.454929][T13862] bond_slave_0: entered promiscuous mode [ 1967.455473][T13862] bond_slave_1: entered promiscuous mode [ 1967.459101][T13862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1967.475508][T13862] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 1974.721735][ T3694] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1974.871140][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 1974.883057][ T3694] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.883930][ T3694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1974.884418][ T3694] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1974.884986][ T3694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.889316][ T3694] usb 2-1: config 0 descriptor?? [ 1975.332535][ T3694] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1975.859733][ T3694] usb 2-1: USB disconnect, device number 66 [ 1976.192433][ T28] audit: type=1400 audit(1976.110:835): avc: denied { watch_reads } for pid=13968 comm="syz.1.2412" path="/447/file1" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1977.621407][T13530] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1977.777440][T13530] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1977.777854][T13530] usb 2-1: config 0 has no interface number 0 [ 1977.789859][T13530] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1977.790152][T13530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.791290][T13530] usb 2-1: Product: syz [ 1977.791346][T13530] usb 2-1: Manufacturer: syz [ 1977.791373][T13530] usb 2-1: SerialNumber: syz [ 1977.795762][T13530] usb 2-1: config 0 descriptor?? [ 1989.631497][T13985] i2c i2c-1: died at extended address code [ 1992.379218][T13530] usb 2-1: USB disconnect, device number 67 [ 1994.124151][T14024] syz_tun: entered allmulticast mode [ 1994.159594][T14023] syz_tun: left allmulticast mode [ 1998.722274][T14037] netlink: 'syz.3.2431': attribute type 4 has an invalid length. [ 2003.566126][ T28] audit: type=1400 audit(2003.480:836): avc: denied { override_creds } for pid=14040 comm="syz.1.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2005.690321][ T28] audit: type=1400 audit(2005.600:837): avc: denied { write } for pid=14043 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2007.281702][ T739] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2007.442159][ T739] usb 2-1: Using ep0 maxpacket: 16 [ 2007.483180][ T739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.485461][ T739] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2007.513002][ T739] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2007.514440][ T739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.517362][ T739] usb 2-1: Product: syz [ 2007.518573][ T739] usb 2-1: Manufacturer: syz [ 2007.521237][ T739] usb 2-1: SerialNumber: syz [ 2007.526061][ T739] usb 2-1: config 0 descriptor?? [ 2007.765014][ T739] usb 2-1: USB disconnect, device number 68 [ 2008.909536][T14090] input: syz0 as /devices/virtual/input/input9 [ 2017.172045][T11833] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2017.402574][T11833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2017.419339][T11833] usb 2-1: not running at top speed; connect to a high speed hub [ 2017.472641][T11833] usb 2-1: config index 0 descriptor too short (expected 37138, got 18) [ 2017.473081][T11833] usb 2-1: config 36 has too many interfaces: 125, using maximum allowed: 32 [ 2017.473166][T11833] usb 2-1: config 36 has an invalid interface number: 241 but max is 124 [ 2017.473212][T11833] usb 2-1: config 36 has 1 interface, different from the descriptor's value: 125 [ 2017.473248][T11833] usb 2-1: config 36 has no interface number 0 [ 2017.473290][T11833] usb 2-1: config 36 interface 241 has no altsetting 0 [ 2017.612719][T11833] usb 2-1: New USB device found, idVendor=110a, idProduct=1451, bcdDevice=97.99 [ 2017.612962][T11833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.613122][T11833] usb 2-1: Product: syz [ 2017.613223][T11833] usb 2-1: Manufacturer: syz [ 2017.613248][T11833] usb 2-1: SerialNumber: syz [ 2022.811580][T11833] mxuport 2-1:36.241: mxuport_send_ctrl_data_urb - usb_control_msg failed (-32) [ 2022.813594][T11833] mxuport 2-1:36.241: mxuport_send_ctrl_data_urb - usb_control_msg failed (-32) [ 2022.818151][T11833] mxuport 2-1:36.241: probe with driver mxuport failed with error -32 [ 2031.893319][ T739] usb 2-1: USB disconnect, device number 69 [ 2061.635909][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 2061.652599][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 2069.646013][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 2070.835796][ T28] audit: type=1400 audit(2070.750:838): avc: denied { append } for pid=14383 comm="syz.1.2520" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2074.138531][ T28] audit: type=1400 audit(2074.050:839): avc: denied { mounton } for pid=14393 comm="syz.1.2524" path="/505/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 2074.905863][ T28] audit: type=1326 audit(2074.820:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.1.2525" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2074.906320][ T28] audit: type=1326 audit(2074.820:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.1.2525" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2074.914155][ T28] audit: type=1326 audit(2074.820:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.1.2525" exe="/syz-executor" sig=0 arch=40000028 syscall=376 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2074.914568][ T28] audit: type=1326 audit(2074.820:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.1.2525" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2080.577475][T14207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.693387][T14207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.848103][T14207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.028032][T14207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.384985][T14207] bond_slave_0: left promiscuous mode [ 2081.385441][T14207] bond_slave_1: left promiscuous mode [ 2081.768725][T14207] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2081.982072][T14207] bond3 (unregistering): (slave macvlan2): Removing an active aggregator [ 2081.984201][T14207] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 2082.075982][T14207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2082.096615][T14207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2082.187566][T14207] bond0 (unregistering): Released all slaves [ 2082.215229][T14207] bond1 (unregistering): Released all slaves [ 2082.244026][T14207] bond2 (unregistering): Released all slaves [ 2082.335319][T14207] bond3 (unregistering): Released all slaves [ 2082.613392][T14207] hsr_slave_0: left promiscuous mode [ 2082.622309][T14207] hsr_slave_1: left promiscuous mode [ 2082.654235][T14207] veth1_macvtap: left promiscuous mode [ 2082.654830][T14207] veth0_macvtap: left promiscuous mode [ 2082.655654][T14207] veth1_vlan: left promiscuous mode [ 2082.655830][T14207] veth0_vlan: left promiscuous mode [ 2087.765328][T14432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2087.792945][T14432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.856382][T14432] hsr_slave_0: entered promiscuous mode [ 2089.862330][T14432] hsr_slave_1: entered promiscuous mode [ 2089.864225][T14432] debugfs: 'hsr0' already exists in 'hsr' [ 2089.865806][T14432] Cannot create hsr debugfs directory [ 2091.487230][T14432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2091.496289][T14432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2091.515311][T14432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2091.525322][T14432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2093.370310][T14432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2099.385392][T14432] veth0_vlan: entered promiscuous mode [ 2099.457014][T14432] veth1_vlan: entered promiscuous mode [ 2099.641990][T14432] veth0_macvtap: entered promiscuous mode [ 2099.669683][T14432] veth1_macvtap: entered promiscuous mode [ 2099.825505][T14201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.828214][T14201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.828319][T14201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.828595][T14201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.733219][T14876] veth0: entered promiscuous mode [ 2104.782145][T14874] veth0: left promiscuous mode [ 2108.831773][ T28] audit: type=1400 audit(2108.740:844): avc: denied { mount } for pid=14910 comm="syz.1.2576" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2112.150046][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2583'. [ 2112.596000][T14948] ptrace attach of "/syz-executor exec"[14949] was attempted by "/syz-executor exec"[14948] [ 2115.371740][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 2117.834459][T14989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2604'. [ 2119.543579][T15004] veth0: entered promiscuous mode [ 2119.548139][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 2120.662294][T15016] bond1: entered allmulticast mode [ 2132.553957][T15124] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 2132.629433][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2646'. [ 2135.217318][ T28] audit: type=1400 audit(2135.130:845): avc: denied { mount } for pid=15177 comm="syz.3.2654" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2135.243197][ T28] audit: type=1400 audit(2135.160:846): avc: denied { unmount } for pid=14432 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2145.491217][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 2150.215746][ T28] audit: type=1400 audit(2150.130:847): avc: denied { ioctl } for pid=15302 comm="syz.3.2705" path="socket:[27249]" dev="sockfs" ino=27249 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2153.217755][T15326] ip6gre1: entered promiscuous mode [ 2153.218132][T15326] ip6gre1: entered allmulticast mode [ 2155.939066][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 2156.727323][T15361] ipip0: entered promiscuous mode [ 2157.338895][ T28] audit: type=1400 audit(2157.250:848): avc: denied { write } for pid=15368 comm="syz.1.2728" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2160.152705][T15394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15394 comm=syz.3.2736 [ 2163.746157][T15414] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2163.796129][T15414] bond3: (slave lo): Enslaving as an active interface with an up link [ 2163.797312][T15414] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2169.271685][ T28] audit: type=1326 audit(2169.180:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2169.273485][ T28] audit: type=1326 audit(2169.180:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2169.296162][ T28] audit: type=1326 audit(2169.210:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=224 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2169.296783][ T28] audit: type=1326 audit(2169.210:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2169.297277][ T28] audit: type=1326 audit(2169.210:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2169.309608][ T28] audit: type=1326 audit(2169.220:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=161 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2169.310122][ T28] audit: type=1326 audit(2169.220:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.1.2760" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2175.602480][T15535] misc userio: No port type given on /dev/userio [ 2175.612886][T15535] misc userio: The device must be registered before sending interrupts [ 2203.101790][T15562] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2774'. [ 2240.788733][T12371] bond1 (unregistering): (slave gre1): Releasing backup interface [ 2240.849989][T12371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2240.858221][T12371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2240.862535][T12371] bond0 (unregistering): Released all slaves [ 2240.872854][T12371] bond1 (unregistering): Released all slaves [ 2240.887957][T12371] bond2 (unregistering): Released all slaves [ 2240.904038][T12371] bond3 (unregistering): (slave lo): Releasing backup interface [ 2240.906240][T12371] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2240.923568][T12371] bond3 (unregistering): Released all slaves [ 2241.034998][T12371] hsr_slave_0: left promiscuous mode [ 2241.038385][T12371] hsr_slave_1: left promiscuous mode [ 2243.949108][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2243.970158][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2245.400384][T15805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2790'. [ 2245.406903][T15805] netlink: 'syz.3.2790': attribute type 1 has an invalid length. [ 2245.408841][T15805] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2790'. [ 2245.804818][T15602] hsr_slave_0: entered promiscuous mode [ 2245.805963][T15602] hsr_slave_1: entered promiscuous mode [ 2246.740344][T15602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2246.774918][T15602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2246.799299][T15602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2246.836287][T15602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2247.913554][T15602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2251.518778][T15602] veth0_vlan: entered promiscuous mode [ 2251.558692][T15602] veth1_vlan: entered promiscuous mode [ 2251.687815][T15602] veth0_macvtap: entered promiscuous mode [ 2251.715068][T15602] veth1_macvtap: entered promiscuous mode [ 2251.806656][T14201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.807588][T14201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.807747][T14201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.807913][T14201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.231781][T15955] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2256.474161][T16059] syzkaller0: entered promiscuous mode [ 2256.474685][T16059] syzkaller0: entered allmulticast mode [ 2260.472034][ T28] audit: type=1400 audit(2260.380:856): avc: denied { execmod } for pid=16108 comm="syz.1.2822" path="/18/cgroup.controllers" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2266.826585][ T28] audit: type=1400 audit(2266.740:857): avc: denied { setopt } for pid=16188 comm="syz.3.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2267.687020][T16192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2837'. [ 2269.957135][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 2272.545494][T16213] netlink: 'syz.3.2844': attribute type 1 has an invalid length. [ 2272.736884][T16213] bond4: (slave ip6gretap1): making interface the new active one [ 2272.739278][T16213] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2282.296708][T16283] bond0: (slave bond_slave_0): Releasing backup interface [ 2282.307316][T16283] bond0: (slave bond_slave_1): Releasing backup interface [ 2282.365780][T16283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2282.879004][T16283] bond1: left allmulticast mode [ 2282.911419][T16283] ip6gre1: left allmulticast mode [ 2292.267763][T16333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2878'. [ 2292.323040][T16333] ip6gre2: entered promiscuous mode [ 2292.323458][T16333] ip6gre2: entered allmulticast mode [ 2295.529636][T16358] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 2295.633193][T16358] bond5: entered promiscuous mode [ 2295.634709][T16358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2296.041841][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2890'. [ 2312.607452][T16428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2312.647566][T16428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2315.434144][T16428] hsr_slave_0: entered promiscuous mode [ 2315.436926][T16428] hsr_slave_1: entered promiscuous mode [ 2315.439031][T16428] debugfs: 'hsr0' already exists in 'hsr' [ 2315.451588][T16428] Cannot create hsr debugfs directory [ 2316.326466][T16428] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2316.339027][T16428] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2316.392848][T16428] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2316.448263][T16428] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2319.099146][T16428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2325.282211][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 2325.284251][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'. [ 2325.288762][T16765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2920'. N ev&[ 2327.605325][T16428] veth0_vlan: entered promiscuous mode [ 2327.702154][T16428] veth1_vlan: entered promiscuous mode [ 2327.919514][T16428] veth0_macvtap: entered promiscuous mode [ 2327.953796][T16428] veth1_macvtap: entered promiscuous mode [ 2328.032263][T14224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2328.033169][T14207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2328.033787][T14207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2328.036758][T14207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.195484][T16801] ip6gre3: entered promiscuous mode [ 2329.204529][T16801] ip6gre3: entered allmulticast mode [ 2329.508446][T16810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2329.510184][T16810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2329.850505][ T28] audit: type=1400 audit(2329.750:858): avc: denied { kexec_image_load } for pid=16813 comm="syz.3.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2330.233132][T14224] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2330.234111][T14224] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2330.262298][T13530] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2331.112407][T13563] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2331.273049][ T4711] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2332.674526][T16836] binder: 16835:16836 ioctl c0306201 200001c0 returned -14 [ 2333.045481][T16838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2333.053048][T16838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.551613][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2335.568246][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 2335.586575][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 2343.591299][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2344.160168][T16885] syzkaller0: entered promiscuous mode [ 2344.160862][T16885] syzkaller0: entered allmulticast mode [ 2345.384630][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.386736][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2350.592659][T16937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 2352.265524][ T28] audit: type=1400 audit(2352.180:859): avc: denied { setopt } for pid=16940 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2352.312011][ T28] audit: type=1400 audit(2352.210:860): avc: denied { write } for pid=16940 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2354.505242][T16944] netlink: 'syz.3.2974': attribute type 13 has an invalid length. [ 2355.043564][T11716] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2355.755375][T11716] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2360.728543][T16967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2360.730078][T16967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2361.521772][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2363.111362][ T28] audit: type=1400 audit(2362.960:861): avc: denied { create } for pid=16970 comm="syz.3.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2363.111758][ T28] audit: type=1400 audit(2362.980:862): avc: denied { sys_admin } for pid=16970 comm="syz.3.2981" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2369.356604][T16998] lo: entered allmulticast mode [ 2374.904199][ T28] audit: type=1400 audit(2374.820:863): avc: denied { bind } for pid=17031 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2374.904908][ T28] audit: type=1400 audit(2374.820:864): avc: denied { name_bind } for pid=17031 comm="syz.3.3005" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2374.905290][ T28] audit: type=1400 audit(2374.820:865): avc: denied { node_bind } for pid=17031 comm="syz.3.3005" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2375.251533][T17035] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 2375.562819][T17037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3007'. [ 2378.070569][T14224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.157699][T14224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.229092][T14224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.398054][T14224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.145530][T14224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2379.165114][T14224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2379.169276][T14224] bond0 (unregistering): Released all slaves [ 2379.296323][T14224] hsr_slave_0: left promiscuous mode [ 2379.299735][T14224] hsr_slave_1: left promiscuous mode [ 2379.373168][T14224] veth1_macvtap: left promiscuous mode [ 2379.373664][T14224] veth0_macvtap: left promiscuous mode [ 2379.373886][T14224] veth1_vlan: left promiscuous mode [ 2379.374073][T14224] veth0_vlan: left promiscuous mode [ 2380.414138][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2380.419859][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2382.716512][T17029] hsr_slave_0: entered promiscuous mode [ 2382.720163][T17029] hsr_slave_1: entered promiscuous mode [ 2383.339524][T17029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2383.358648][T17029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2383.378348][T17029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2383.399879][T17029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2385.146218][T17029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2390.262545][T17029] veth0_vlan: entered promiscuous mode [ 2390.302290][T17029] veth1_vlan: entered promiscuous mode [ 2390.474864][T17029] veth0_macvtap: entered promiscuous mode [ 2390.496633][T17029] veth1_macvtap: entered promiscuous mode [ 2390.623982][T14224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.624576][T14224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.624689][T14224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.624767][T14224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.319456][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3023'. [ 2392.626927][T17468] comedi: valid board names for 8255 driver are: [ 2392.627496][T17468] 8255 [ 2392.642695][T17468] comedi: valid board names for vmk80xx driver are: [ 2392.643212][T17468] vmk80xx [ 2392.643385][T17468] comedi: valid board names for usbduxsigma driver are: [ 2392.643534][T17468] usbduxsigma [ 2392.643676][T17468] comedi: valid board names for usbduxfast driver are: [ 2392.643807][T17468] usbduxfast [ 2392.643845][T17468] comedi: valid board names for usbdux driver are: [ 2392.643863][T17468] usbdux [ 2392.643876][T17468] comedi: valid board names for ni6501 driver are: [ 2392.643959][T17468] ni6501 [ 2392.643981][T17468] comedi: valid board names for dt9812 driver are: [ 2392.643998][T17468] dt9812 [ 2392.644054][T17468] comedi: valid board names for ni_labpc_cs driver are: [ 2392.644077][T17468] ni_labpc_cs [ 2392.644091][T17468] comedi: valid board names for ni_daq_700 driver are: [ 2392.644106][T17468] ni_daq_700 [ 2392.644120][T17468] comedi: valid board names for labpc_pci driver are: [ 2392.644158][T17468] labpc_pci [ 2392.644175][T17468] comedi: valid board names for adl_pci9118 driver are: [ 2392.644194][T17468] pci9118dg [ 2392.644211][T17468] pci9118hg [ 2392.644224][T17468] pci9118hr [ 2392.644238][T17468] comedi: valid board names for 8255_pci driver are: [ 2392.644294][T17468] 8255_pci [ 2392.644312][T17468] comedi: valid board names for comedi_parport driver are: [ 2392.644331][T17468] comedi_parport [ 2392.644344][T17468] comedi: valid board names for comedi_test driver are: [ 2392.644357][T17468] comedi_test [ 2392.644370][T17468] comedi: valid board names for comedi_bond driver are: [ 2392.644385][T17468] comedi_bond [ 2392.804404][ T28] audit: type=1400 audit(2392.720:866): avc: denied { execute } for pid=17469 comm="syz.5.3029" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2393.858377][T17481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2393.949470][T17483] trusted_key: encrypted_key: key user:syz not found [ 2396.712040][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2396.764848][T17517] bond1: entered promiscuous mode [ 2402.067777][T17607] netlink: 'syz.5.3068': attribute type 1 has an invalid length. [ 2402.279222][T17607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2402.483505][T17608] gretap0: entered promiscuous mode [ 2404.004987][T17652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2404.869982][T17673] netlink: 'syz.3.3076': attribute type 4 has an invalid length. [ 2406.773768][ T28] audit: type=1326 audit(2406.690:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2406.801989][ T28] audit: type=1326 audit(2406.700:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=257 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2406.825687][ T28] audit: type=1326 audit(2406.740:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2406.851410][ T28] audit: type=1326 audit(2406.760:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=258 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2406.851746][ T28] audit: type=1326 audit(2406.760:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2406.908195][ T28] audit: type=1326 audit(2406.760:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2406.908634][ T28] audit: type=1326 audit(2406.810:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2406.971623][ T28] audit: type=1326 audit(2406.850:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2406.972053][ T28] audit: type=1326 audit(2406.850:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2406.994658][ T28] audit: type=1326 audit(2406.910:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.3.3086" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2412.331986][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 2414.267268][T17751] bridge_slave_1: entered promiscuous mode [ 2415.684439][T17765] block device autoloading is deprecated and will be removed. [ 2415.997504][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 2415.998079][ T28] audit: type=1400 audit(2415.910:990): avc: denied { mount } for pid=17769 comm="syz.5.3109" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 2425.267407][T17857] lo: Caught tx_queue_len zero misconfig [ 2425.268298][T17857] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2426.995415][ T28] audit: type=1326 audit(2426.910:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2426.998112][ T28] audit: type=1326 audit(2426.910:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2427.002008][ T28] audit: type=1326 audit(2426.910:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2427.003533][ T28] audit: type=1326 audit(2426.910:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2427.021386][ T28] audit: type=1326 audit(2426.930:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2427.021825][ T28] audit: type=1326 audit(2426.930:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2427.022065][ T28] audit: type=1326 audit(2426.930:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2427.022279][ T28] audit: type=1326 audit(2426.930:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2427.022479][ T28] audit: type=1326 audit(2426.930:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2427.022683][ T28] audit: type=1326 audit(2426.930:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17876 comm="syz.5.3155" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2431.387412][T17891] netlink: 'syz.5.3160': attribute type 4 has an invalid length. [ 2441.352841][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 2443.514628][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3176'. [ 2443.896285][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 2446.489598][T17944] syzkaller0: entered promiscuous mode [ 2446.496145][T17944] syzkaller0: entered allmulticast mode [ 2449.163246][T14201] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.252802][T14201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.374667][T14201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.526730][T14201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2450.276426][T14201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2450.317651][T14201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2450.323696][T14201] bond0 (unregistering): Released all slaves [ 2450.424948][T14201] hsr_slave_0: left promiscuous mode [ 2450.427184][T14201] hsr_slave_1: left promiscuous mode [ 2450.484312][T14201] veth1_macvtap: left promiscuous mode [ 2450.486287][T14201] veth0_macvtap: left promiscuous mode [ 2450.500516][T14201] veth1_vlan: left promiscuous mode [ 2450.506041][T14201] veth0_vlan: left promiscuous mode [ 2453.157983][T17993] veth0_vlan: entered allmulticast mode [ 2453.317803][T17993] veth0_vlan: left promiscuous mode [ 2453.337110][T17993] veth0_vlan: entered promiscuous mode [ 2454.338145][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3194'. [ 2454.338867][T18002] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3194'. [ 2455.302438][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 2455.303109][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3196'. [ 2470.835522][T18089] netlink: 'syz.5.3216': attribute type 10 has an invalid length. [ 2470.951214][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2511.523580][T18209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3241'. [ 2517.865500][ T28] kauditd_printk_skb: 484 callbacks suppressed [ 2517.866026][ T28] audit: type=1326 audit(2517.780:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2517.876193][ T28] audit: type=1326 audit(2517.790:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2517.894743][ T28] audit: type=1326 audit(2517.810:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2517.899310][ T28] audit: type=1326 audit(2517.810:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2517.906198][ T28] audit: type=1326 audit(2517.820:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2517.913357][ T28] audit: type=1326 audit(2517.830:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2517.913878][ T28] audit: type=1326 audit(2517.830:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2518.093888][ T28] audit: type=1326 audit(2517.950:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2518.101807][ T28] audit: type=1326 audit(2518.020:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2518.104018][ T28] audit: type=1326 audit(2518.020:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.3.3247" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2520.357529][T18246] fuse: Bad value for 'fd' [ 2521.058475][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3261'. [ 2529.591670][T18315] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2530.442336][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3289'. [ 2530.447444][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 2530.462444][T18319] veth0_vlan: left promiscuous mode [ 2530.464211][T18319] vlan0: entered promiscuous mode [ 2530.465171][T18319] veth0_vlan: entered promiscuous mode [ 2530.819742][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3291'. [ 2532.261713][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3297'. [ 2533.636278][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 2533.636612][ T28] audit: type=1326 audit(2533.550:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.637671][ T28] audit: type=1326 audit(2533.550:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.638670][ T28] audit: type=1326 audit(2533.550:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.639525][ T28] audit: type=1326 audit(2533.550:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.640405][ T28] audit: type=1326 audit(2533.550:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.642821][ T28] audit: type=1326 audit(2533.560:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.648246][ T28] audit: type=1326 audit(2533.560:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.649959][ T28] audit: type=1326 audit(2533.560:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.654716][ T28] audit: type=1326 audit(2533.570:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2533.695746][ T28] audit: type=1326 audit(2533.610:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.3303" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 2537.596492][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3312'. [ 2540.505267][T17728] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2540.581752][T17728] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2547.901597][T18433] input: syz1 as /devices/virtual/input/input11 [ 2551.123610][T18451] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3339'. [ 2571.570296][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3346'. [ 2571.717279][T18473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2571.720263][T18473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2571.750035][T18473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2571.752915][T18473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2571.774278][T18473] syz_tun: entered allmulticast mode [ 2571.836395][T18473] dvmrp6: entered allmulticast mode [ 2572.083723][T18000] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2572.087765][T18000] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2597.137296][T18507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.138497][T18507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.583933][T18511] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2602.287953][ T3694] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 2602.288890][ T3694] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 2602.289961][ T3694] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 2602.295784][ T3694] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2619.431639][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2675.769800][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 2675.772364][ T28] audit: type=1400 audit(2675.680:1787): avc: denied { create } for pid=18699 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2676.875488][ T28] audit: type=1400 audit(2676.790:1788): avc: denied { mounton } for pid=18704 comm="syz.3.3423" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2681.225333][ T28] audit: type=1326 audit(2681.140:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.3.3432" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2681.231679][ T28] audit: type=1326 audit(2681.140:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.3.3432" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2681.235566][ T28] audit: type=1326 audit(2681.150:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.3.3432" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2692.386561][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3440'. [ 2693.560427][ T28] audit: type=1326 audit(2693.470:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.3443" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2693.574241][ T28] audit: type=1326 audit(2693.490:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.3443" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2693.586090][ T28] audit: type=1326 audit(2693.500:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.3443" exe="/syz-executor" sig=0 arch=40000028 syscall=373 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2693.591932][ T28] audit: type=1326 audit(2693.510:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.3443" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2694.919062][ T3694] Process accounting resumed [ 2695.016589][T18757] Process accounting resumed [ 2696.458432][T18764] syzkaller1: entered promiscuous mode [ 2696.481699][T18764] syzkaller1: entered allmulticast mode [ 2697.464542][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3449'. [ 2697.535742][T18774] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2697.645414][T18774] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2697.813919][T18774] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2697.943932][T18774] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.152262][T14224] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.207434][T12371] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.285697][ T130] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.286150][ T130] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.816628][T18830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2722.819415][T18830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.633491][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2730.637117][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.917414][T18875] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.3480'. [ 2731.239660][ T28] audit: type=1400 audit(2731.150:1796): avc: denied { setopt } for pid=18878 comm="syz.5.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2731.891890][T18889] x_tables: ip_tables: limit.0 match: invalid size 32 (kernel) != (user) 40 [ 2732.943667][ T28] audit: type=1400 audit(2732.850:1797): avc: denied { map } for pid=18905 comm="syz.5.3495" path="socket:[35255]" dev="sockfs" ino=35255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2734.616078][T18921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2734.617172][T18921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.818555][T18925] fuse: Bad value for 'group_id' [ 2734.818983][T18925] fuse: Bad value for 'group_id' [ 2739.741315][T18964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2739.742415][T18964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.703410][ T28] audit: type=1400 audit(2740.620:1798): avc: denied { ioctl } for pid=18969 comm="syz.5.3521" path="socket:[35299]" dev="sockfs" ino=35299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2789.129249][T19054] fuse: Unknown parameter 'group_id00000000000000000000' [ 2790.283903][T19064] fuse: Bad value for 'fd' [ 2813.989832][T19094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2814.003017][T19094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2824.396382][T19137] netlink: 'syz.5.3584': attribute type 10 has an invalid length. [ 2824.453812][T19137] netlink: 'syz.5.3584': attribute type 10 has an invalid length. [ 2825.066297][T19142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2825.073680][T19142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.338163][T19182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.340024][T19182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.753070][T19188] fuse: Unknown parameter 'use00000000000000000000' [ 2834.028186][T19200] fuse: Unknown parameter 'use00000000000000000000' [ 2837.774591][T19211] fuse: Unknown parameter 'use00000000000000000000' [ 2840.414033][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3619'. [ 2840.665182][T19223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2840.666594][T19223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2841.036411][T19227] fuse: Unknown parameter 'user_i00000000000000000000' [ 2843.271194][T19247] fuse: Unknown parameter 'user_i00000000000000000000' [ 2845.226787][T19299] fuse: Unknown parameter 'user_i00000000000000000000' [ 2848.807276][T19231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2848.863368][T19231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2852.019394][T19231] hsr_slave_0: entered promiscuous mode [ 2852.033769][T19231] hsr_slave_1: entered promiscuous mode [ 2852.036158][T19231] debugfs: 'hsr0' already exists in 'hsr' [ 2852.036423][T19231] Cannot create hsr debugfs directory [ 2852.896500][T19231] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2853.014156][T19231] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2853.120440][T19231] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2853.253709][T19231] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2853.542646][T19231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2853.558155][T19231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2853.588211][T19231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2853.606555][T19231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2855.807523][T19231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2863.517265][T19231] veth0_vlan: entered promiscuous mode [ 2863.579447][T19231] veth1_vlan: entered promiscuous mode [ 2863.804073][T19231] veth0_macvtap: entered promiscuous mode [ 2863.852831][T19231] veth1_macvtap: entered promiscuous mode [ 2864.052115][T19194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.062266][T19194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.068893][T19194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.085508][T19194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2865.516532][T19583] fuse: Unknown parameter 'user_id00000000000000000000' [ 2880.178365][T19595] fuse: Unknown parameter 'user_id00000000000000000000' [ 2882.458086][ T28] audit: type=1400 audit(2882.370:1799): avc: denied { bind } for pid=19603 comm="syz.5.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2883.999503][T19606] fuse: Unknown parameter 'user_id00000000000000000000' [ 2890.107394][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 2890.146403][T19625] vlan2: entered promiscuous mode [ 2890.146860][T19625] veth1: entered promiscuous mode [ 2894.104859][T19639] fuse: Bad value for 'fd' [ 2896.083634][T19194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.324496][T19194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.394067][T19194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.469806][T19194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2897.263935][T19194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2897.287404][T19194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2897.314688][T19194] bond0 (unregistering): Released all slaves [ 2897.472974][T19194] hsr_slave_0: left promiscuous mode [ 2897.483128][T19194] hsr_slave_1: left promiscuous mode [ 2897.509015][T19194] veth1_macvtap: left promiscuous mode [ 2897.509594][T19194] veth0_macvtap: left promiscuous mode [ 2897.518496][T19194] veth1_vlan: left promiscuous mode [ 2897.519182][T19194] veth0_vlan: left promiscuous mode [ 2901.032573][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2902.806983][T19652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2902.815259][T19652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2904.201592][T19652] hsr_slave_0: entered promiscuous mode [ 2904.203457][T19652] hsr_slave_1: entered promiscuous mode [ 2904.208148][T19652] debugfs: 'hsr0' already exists in 'hsr' [ 2904.210206][T19652] Cannot create hsr debugfs directory [ 2904.381564][T19875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2904.382634][T19875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2904.592359][T19919] fuse: Bad value for 'fd' [ 2905.319070][T19945] syzkaller0: entered promiscuous mode [ 2905.322217][T19945] syzkaller0: entered allmulticast mode [ 2905.515913][T19652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2905.680082][T19652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2905.779013][T19652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2905.859490][T19652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2906.536203][T19985] fuse: Bad value for 'fd' [ 2907.818412][T19652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2915.622213][T19652] veth0_vlan: entered promiscuous mode [ 2915.647032][T19652] veth1_vlan: entered promiscuous mode [ 2915.794112][T19652] veth0_macvtap: entered promiscuous mode [ 2915.814012][T19652] veth1_macvtap: entered promiscuous mode [ 2915.956115][T17227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2915.959985][T17227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2915.972958][T17227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2915.973389][T17227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.006417][T20064] fuse: Unknown parameter '0x0000000000000003' [ 2920.796013][T20069] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3668'. [ 2924.299099][T20075] xt_l2tp: v2 tid > 0xffff: 37482740 [ 2925.621141][T20078] fuse: Unknown parameter '0x0000000000000003' [ 2928.655751][T20092] fuse: Unknown parameter '0x0000000000000003' [ 2936.204359][T20109] fuse: Unknown parameter '0x0000000000000003' [ 2962.547252][T20127] fuse: Unknown parameter '0x0000000000000003' [ 3019.728951][T20245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3019.729341][T20245] IPv6: NLM_F_CREATE should be set when creating new route [ 3020.993271][ T28] audit: type=1400 audit(3020.910:1800): avc: denied { create } for pid=20240 comm="syz.5.3724" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3021.006275][ T28] audit: type=1400 audit(3020.920:1801): avc: denied { write } for pid=20240 comm="syz.5.3724" name="file0" dev="tmpfs" ino=2197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3021.012965][ T28] audit: type=1400 audit(3020.930:1802): avc: denied { open } for pid=20240 comm="syz.5.3724" path="/423/file0" dev="tmpfs" ino=2197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3031.263969][T20275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3031.265229][T20275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3032.670027][ T28] audit: type=1400 audit(3032.580:1803): avc: denied { unlink } for pid=17029 comm="syz-executor" name="file0" dev="tmpfs" ino=2197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3032.737836][T20281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3032.739699][T20281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.237920][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3053.238929][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.342033][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3053.342993][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.824841][ T28] audit: type=1326 audit(3066.740:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.828509][ T28] audit: type=1326 audit(3066.740:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.835153][ T28] audit: type=1326 audit(3066.750:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.851725][ T28] audit: type=1326 audit(3066.760:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.852136][ T28] audit: type=1326 audit(3066.760:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.852459][ T28] audit: type=1326 audit(3066.760:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.857275][ T28] audit: type=1326 audit(3066.770:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.857716][ T28] audit: type=1326 audit(3066.770:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=217 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.857944][ T28] audit: type=1326 audit(3066.770:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3066.858158][ T28] audit: type=1326 audit(3066.770:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20367 comm="syz.3.3766" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3067.086863][T20370] input: syz0 as /devices/virtual/input/input12 [ 3086.992853][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'. [ 3112.136820][T19194] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3112.137523][T19194] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3112.137921][T19194] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3112.138242][T19194] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3113.209507][T20470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3113.213636][T20470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3127.368147][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 3127.369473][ T28] audit: type=1400 audit(3127.280:1817): avc: denied { connect } for pid=20491 comm="syz.5.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3130.374999][T20503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3130.377162][T20503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3130.614880][T20511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3130.618422][T20511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3131.156460][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3131.158837][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3131.316398][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3131.323547][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3133.593558][T20542] pimreg: entered allmulticast mode [ 3133.640479][T20542] pimreg: left allmulticast mode [ 3139.210424][T20540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3139.224203][T20540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3164.907584][T20570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3164.908557][T20570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3175.775472][T20586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3175.783875][T20586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3180.123247][T20601] syz.3.3839 (20601): drop_caches: 2 [ 3192.425631][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3192.428676][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3221.817799][ T28] audit: type=1400 audit(3221.730:1818): avc: denied { mount } for pid=20665 comm="syz.3.3857" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 3231.231290][ T28] audit: type=1400 audit(3231.120:1819): avc: denied { lock } for pid=20683 comm="syz.3.3864" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3231.983487][T20686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3231.984445][T20686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3251.068236][T20705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3251.075497][T20705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3251.080431][T20705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3871'. [ 3251.288995][T20705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3251.295615][T20705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3251.515299][T20705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3251.518303][T20705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3286.183465][T20750] binder: 20749:20750 ioctl c0306201 0 returned -14 [ 3310.023701][T20782] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3888'. [ 3314.796406][T20797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3314.797401][T20797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3315.014034][T20803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3315.017077][T20803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3365.150043][T21005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3365.154813][T21005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3383.596346][T21028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3383.597332][T21028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3428.306086][ T28] audit: type=1326 audit(3428.220:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.3.3946" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 3431.789939][T21109] random: crng reseeded on system resumption [ 3438.887830][T21125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3438.894290][T21125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3440.871500][T21115] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3442.276781][T21139] random: crng reseeded on system resumption [ 3442.504398][T21139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3442.508464][T21139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3465.838842][T21171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3465.839900][T21171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3474.505728][T21199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3474.510355][T21199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3494.954737][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 3508.439977][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3984'. [ 3517.993796][T21266] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3987'. [ 3518.786566][T21269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3522.362088][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 3534.042528][T21314] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3996'. [ 3538.637659][ T28] audit: type=1400 audit(3538.550:1821): avc: denied { associate } for pid=21318 comm="syz.3.3998" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3574.189221][ T28] audit: type=1400 audit(3574.100:1822): avc: denied { listen } for pid=21354 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 3598.222189][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3598.223342][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3704.426617][T21455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3704.430412][T21455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 3714.924848][T21463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3714.938820][T21463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3719.122509][T21463] hsr_slave_0: entered promiscuous mode [ 3719.126268][T21463] hsr_slave_1: entered promiscuous mode [ 3719.143179][T21463] debugfs: 'hsr0' already exists in 'hsr' [ 3719.146103][T21463] Cannot create hsr debugfs directory [ 3721.253326][T21463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3721.328897][T21463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3721.415003][T21463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3721.454561][T21463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3723.414849][T21463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3733.426081][T21764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4039'. [ 3736.433413][T21463] veth0_vlan: entered promiscuous mode [ 3736.462398][T21463] veth1_vlan: entered promiscuous mode [ 3736.559728][T21463] veth0_macvtap: entered promiscuous mode [ 3736.574101][T21463] veth1_macvtap: entered promiscuous mode [ 3736.947555][T21415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3736.948038][T21415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3736.948136][T21415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3736.948213][T21415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3740.043257][T21784] binder: 21783:21784 ioctl c0306201 20000640 returned -22 [ 3743.330332][T21789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3743.352935][T21789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3743.717412][T21793] syzkaller0: entered promiscuous mode [ 3743.733537][T21793] syzkaller0: entered allmulticast mode [ 3745.693068][T21801] kernel profiling enabled (shift: 9) [ 3776.169311][T21815] syzkaller0: entered promiscuous mode [ 3776.199311][T21815] syzkaller0: entered allmulticast mode [ 3816.642135][T21856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3816.663332][T21856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3817.463975][T21860] netlink: 'syz.5.4058': attribute type 39 has an invalid length. [ 3819.484219][T21876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3819.486703][T21876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3820.700042][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.709355][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.732768][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.739462][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.853930][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.865787][T21364] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.876765][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.877687][T20823] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 3820.878661][T21364] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.890466][T21364] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.891565][T21364] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3821.020505][T20823] hid-generic 0004:0004:FFFF0001.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3824.320397][T21899] netlink: 'syz.6.4066': attribute type 1 has an invalid length. [ 3825.125831][T21901] macvlan2: entered promiscuous mode [ 3825.168831][T21901] macvlan2: entered allmulticast mode [ 3851.114284][T21926] syzkaller0: entered promiscuous mode [ 3851.821910][T21934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.823442][T21934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.234511][T21938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3852.240645][T21938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3861.497648][T21971] syzkaller0: entered promiscuous mode [ 3861.498084][T21971] syzkaller0: entered allmulticast mode [ 3865.032404][T21993] syzkaller0: entered promiscuous mode [ 3865.032859][T21993] syzkaller0: entered allmulticast mode [ 3875.082175][T22018] syz_tun: left allmulticast mode [ 3875.176959][T22018] dvmrp6: left allmulticast mode [ 3893.504862][T22022] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4100'. [ 3895.733367][T12371] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3895.735920][T12371] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3895.809704][T12371] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3895.822015][T12371] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3895.873737][T12371] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3895.881145][T12371] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3896.048250][T12371] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3896.050220][T12371] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3897.894014][T12371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3897.940130][T12371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3897.947596][T12371] bond0 (unregistering): Released all slaves [ 3898.160440][T12371] bond1 (unregistering): Released all slaves [ 3898.548791][T12371] bond2 (unregistering): Released all slaves [ 3899.032104][T12371] hsr_slave_0: left promiscuous mode [ 3899.041170][T12371] hsr_slave_1: left promiscuous mode [ 3899.082168][T12371] veth1_macvtap: left promiscuous mode [ 3899.082583][T12371] veth0_macvtap: left promiscuous mode [ 3899.082722][T12371] veth1_vlan: left promiscuous mode [ 3899.082822][T12371] veth0_vlan: left promiscuous mode [ 3906.673038][T22034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3906.686096][T22034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3909.236815][T22034] hsr_slave_0: entered promiscuous mode [ 3909.394669][T22034] hsr_slave_1: entered promiscuous mode [ 3911.880249][T22034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3911.892497][T22034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3911.912232][T22034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3911.941734][T22034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3913.802417][T22034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3924.932940][T22034] veth0_vlan: entered promiscuous mode [ 3924.975193][T22034] veth1_vlan: entered promiscuous mode [ 3925.069261][T22034] veth0_macvtap: entered promiscuous mode [ 3925.078247][T22034] veth1_macvtap: entered promiscuous mode [ 3925.166748][T14207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3925.176464][T14207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3925.198470][T14207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3925.201249][T14207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3928.370234][T22436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3928.380170][T22436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3936.679383][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3936.687820][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3943.036877][T22477] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4121'. [ 3961.425217][T22491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3961.498788][T22491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3962.192360][T22491] i2c i2c-0: died at extended address code [ 3964.164356][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4131'. [ 3964.164878][T22508] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4131'. [ 3964.188149][T22508] ip6gretap0: entered promiscuous mode [ 3964.190237][T22508] syz_tun: entered promiscuous mode [ 3964.217149][T22508] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 3964.223664][T22508] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 3964.866720][T22512] usb usb1: usbfs: process 22512 (syz.6.4132) did not claim interface 0 before use [ 3965.114778][T22516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3965.118325][T22516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3965.155035][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4134'. [ 3965.155366][T22516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4134'. [ 3967.735537][T22524] syzkaller0: entered promiscuous mode [ 3967.735807][T22524] syzkaller0: entered allmulticast mode [ 3972.317633][T22535] syzkaller0: entered promiscuous mode [ 3972.330360][T22535] syzkaller0: entered allmulticast mode [ 3986.421622][ T28] audit: type=1326 audit(3986.330:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22565 comm="syz.5.4148" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3986.424150][ T28] audit: type=1326 audit(3986.330:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22565 comm="syz.5.4148" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 3987.425920][T22580] syzkaller0: entered promiscuous mode [ 3987.426415][T22580] syzkaller0: entered allmulticast mode [ 4019.321494][T22602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4019.326394][T22602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4019.385534][T22602] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4159'. [ 4029.871923][T22620] pim6reg: entered allmulticast mode [ 4049.414039][T22637] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4166'. [ 4051.023263][T22653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4051.042986][T22653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4064.664587][T22689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4184'. [ 4067.815610][ T28] audit: type=1326 audit(4067.730:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.6.4190" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4067.821948][ T28] audit: type=1326 audit(4067.730:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.6.4190" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4070.876783][T22711] input: syz0 as /devices/virtual/input/input13 [ 4097.773140][T22735] ALSA: mixer_oss: invalid OSS volume '' [ 4102.909536][ T28] audit: type=1326 audit(4102.780:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4102.909875][ T28] audit: type=1326 audit(4102.780:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4102.910218][ T28] audit: type=1326 audit(4102.810:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4102.915461][ T28] audit: type=1326 audit(4102.830:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4102.916722][ T28] audit: type=1326 audit(4102.830:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4103.070816][ T28] audit: type=1326 audit(4102.980:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=444 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4103.098488][ T28] audit: type=1326 audit(4102.980:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4103.126192][ T28] audit: type=1326 audit(4103.040:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22753 comm="syz.6.4207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 4120.011772][T22778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4120.012876][T22778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4168.441188][T22837] input: syz1 as /devices/virtual/input/input14 [ 4168.664012][ T28] audit: type=1400 audit(4168.580:1835): avc: denied { write } for pid=22834 comm="syz.6.4238" name="cgroup.subtree_control" dev="cgroup2" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 4168.672627][T22836] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 4168.699460][ T28] audit: type=1400 audit(4168.580:1836): avc: denied { open } for pid=22834 comm="syz.6.4238" path="" dev="cgroup2" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 4168.731406][ T28] audit: type=1400 audit(4168.590:1837): avc: denied { relabelto } for pid=22834 comm="syz.6.4238" name="cgroup.subtree_control" dev="cgroup2" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 4168.795466][ T28] audit: type=1400 audit(4168.590:1838): avc: denied { associate } for pid=22834 comm="syz.6.4238" name="cgroup.subtree_control" dev="cgroup2" ino=361 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initrc_exec_t:s0" [ 4174.767514][T22873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4174.768636][T22873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4176.924803][T22881] snd_dummy snd_dummy.0: control 5:65535:65537:syz1:4 is already present [ 4202.904472][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4202.907212][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4204.236498][T22928] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4263'. [ 4212.746074][T22962] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 4217.180172][T22975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4282'. [ 4247.683737][ T28] audit: type=1400 audit(4247.600:1839): avc: denied { add_name } for pid=23007 comm="syz.6.4296" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4247.702206][ T28] audit: type=1400 audit(4247.610:1840): avc: denied { create } for pid=23007 comm="syz.6.4296" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 4249.880372][ T28] audit: type=1400 audit(4249.790:1841): avc: denied { shutdown } for pid=23014 comm="syz.5.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 4262.768416][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4315'. [ 4270.757659][T23081] syzkaller0: entered promiscuous mode [ 4270.777707][T23081] syzkaller0: entered allmulticast mode [ 4276.895601][T23112] netlink: 'syz.5.4332': attribute type 9 has an invalid length. [ 4282.048636][ T28] audit: type=1400 audit(4281.960:1842): avc: denied { name_bind } for pid=23142 comm="syz.6.4341" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 4282.894303][T23145] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4342'. [ 4298.742269][T23189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=23189 comm=syz.6.4351 [ 4299.532106][T23190] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4351'. [ 4301.978459][ T28] audit: type=1400 audit(4301.890:1843): avc: denied { recv } for pid=3083 comm="syz-executor" saddr=127.0.0.1 src=33328 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 4302.031249][ T28] audit: type=1400 audit(4301.940:1844): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33328 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 4315.302330][T23250] dvmrp6: entered allmulticast mode [ 4316.526326][T23257] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 4323.074043][T23285] netlink: 'syz.5.4378': attribute type 12 has an invalid length. [ 4323.074484][T23285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4378'. [ 4323.075776][T23285] bond0: option primary_reselect: invalid value (8) [ 4324.444684][T23292] syzkaller1: entered promiscuous mode [ 4324.448492][T23292] syzkaller1: entered allmulticast mode [ 4327.740265][T23307] netlink: 'syz.5.4385': attribute type 12 has an invalid length. [ 4328.330082][ T28] audit: type=1400 audit(4328.240:1845): avc: denied { getopt } for pid=23309 comm="syz.6.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 4347.213383][T23414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4419'. [ 4349.801637][T23428] snd_dummy snd_dummy.0: control 5:65535:65537:syz1:4 is already present [ 4357.384608][T23492] tmpfs: Unsupported parameter 'huge' [ 4363.969137][T23529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4364.104554][T23529] bond0: (slave bond1): Enslaving as an active interface with an up link [ 4367.734829][T23581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=23581 comm=syz.6.4465 [ 4368.927043][T23588] ip6gre1: entered promiscuous mode [ 4368.927519][T23588] ip6gre1: entered allmulticast mode [ 4369.845224][T23593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4369.898924][T23593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4371.769722][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4472'. [ 4372.583102][ T28] audit: type=1400 audit(4372.470:1846): avc: denied { getopt } for pid=23617 comm="syz.6.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 4380.755489][T23655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23655 comm=syz.5.4491 [ 4381.635960][T23663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4381.637172][T23663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4381.926165][ T28] audit: type=1400 audit(4381.840:1847): avc: denied { mount } for pid=23661 comm="syz.6.4494" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 4384.897465][T23684] input: syz1 as /devices/virtual/input/input15 [ 4388.572049][ T28] audit: type=1400 audit(4388.490:1848): avc: denied { execmem } for pid=23695 comm="syz.6.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 4410.234047][ T28] audit: type=1400 audit(4410.150:1849): avc: denied { append } for pid=23706 comm="syz.5.4510" name="nbd5" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 4461.757084][T23744] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4521'. [ 4461.757603][T23744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4521'. [ 4461.758499][T23744] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4521'. [ 4461.758741][T23744] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4521'. [ 4465.459149][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4524'. [ 4537.654526][T23810] netlink: 'syz.5.4541': attribute type 10 has an invalid length. [ 4568.082320][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4568.092130][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4587.892202][ T28] audit: type=1400 audit(4587.790:1850): avc: denied { create } for pid=23845 comm="syz.6.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 4590.777712][T23853] 8<--- cut here --- [ 4590.777977][T23853] Unable to handle kernel paging request at virtual address fee08004 when write [ 4590.778252][T23853] [fee08004] *pgd=80000080007003, *pmd=00000000 [ 4590.778976][T23853] Internal error: Oops: a06 [#1] SMP ARM [ 4590.780557][T23853] Modules linked in: [ 4590.781431][T23853] CPU: 0 UID: 0 PID: 23853 Comm: syz.5.4554 Tainted: G L syzkaller #0 PREEMPT [ 4590.781996][T23853] Tainted: [L]=SOFTLOCKUP [ 4590.782135][T23853] Hardware name: ARM-Versatile Express [ 4590.782440][T23853] PC is at subdev_8255_io+0x60/0x6c [ 4590.782972][T23853] LR is at subdev_8255_io+0x4c/0x6c [ 4590.783186][T23853] pc : [<814108d0>] lr : [<814108bc>] psr: 60000013 [ 4590.783813][T23853] sp : e42edcb8 ip : e42edcb8 fp : e42edcd4 [ 4590.783983][T23853] r10: 00000000 r9 : 00000084 r8 : e42edda4 [ 4590.784400][T23853] r7 : 00008001 r6 : 0000009b r5 : 844abd80 r4 : 00008004 [ 4590.784613][T23853] r3 : 0000009b r2 : fee08004 r1 : 00000001 r0 : 844abd80 [ 4590.784906][T23853] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 4590.785156][T23853] Control: 30c5387d Table: 84c46440 DAC: fffffffd [ 4590.785379][T23853] Register r0 information: slab kmalloc-192 start 844abd80 pointer offset 0 size 192 [ 4590.791185][T23853] Register r1 information: non-paged memory [ 4590.791764][T23853] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 4590.792429][T23853] Register r3 information: non-paged memory [ 4590.792706][T23853] Register r4 information: non-paged memory [ 4590.792939][T23853] Register r5 information: slab kmalloc-192 start 844abd80 pointer offset 0 size 192 [ 4590.793420][T23853] Register r6 information: non-paged memory [ 4590.793732][T23853] Register r7 information: non-paged memory [ 4590.794048][T23853] Register r8 information: 2-page vmalloc region starting at 0xe42ec000 allocated at kernel_clone+0xac/0x3f4 [ 4590.794549][T23853] Register r9 information: non-paged memory [ 4590.794821][T23853] Register r10 information: NULL pointer [ 4590.795121][T23853] Register r11 information: 2-page vmalloc region starting at 0xe42ec000 allocated at kernel_clone+0xac/0x3f4 [ 4590.795634][T23853] Register r12 information: 2-page vmalloc region starting at 0xe42ec000 allocated at kernel_clone+0xac/0x3f4 [ 4590.796139][T23853] Process syz.5.4554 (pid: 23853, stack limit = 0xe42ec000) [ 4590.796634][T23853] Stack: (0xe42edcb8 to 0xe42ee000) [ 4590.797048][T23853] dca0: 81410870 00008001 [ 4590.797375][T23853] dcc0: 844abd80 00008001 e42edcf4 e42edcd8 814105ac 8141087c 00008001 805158c0 [ 4590.797719][T23853] dce0: 86ba4000 86ba4000 e42edd14 e42edcf8 81410964 81410560 844abd80 00000000 [ 4590.798062][T23853] dd00: 86ba4000 00008001 e42edd54 e42edd18 81410b14 814108e8 e42edd3c e42edd28 [ 4590.798440][T23853] dd20: 81aad768 00000000 813fae2c 829d5104 844abd80 00000000 e42edd90 844abd80 [ 4590.798903][T23853] dd40: 00000000 82b29b30 e42edd8c e42edd58 813ff500 81410aac b5403587 00000000 [ 4590.799339][T23853] dd60: 864b8c00 200000c0 844abd80 b5403587 40946400 864b8c00 00000003 844abdb0 [ 4590.799674][T23853] dd80: e42ede4c e42edd90 813fae38 813ff400 35353238 00000000 00000000 00000000 [ 4590.800001][T23853] dda0: 00000000 00008001 00000c09 00000001 00000400 00000001 00000001 00000004 [ 4590.800408][T23853] ddc0: 00000004 0000005c 000000fd 00001002 00000008 0000000b 00000800 00000006 [ 4590.800943][T23853] dde0: ffffffff 00000007 00000400 00000002 40000003 00000089 00000002 00000f27 [ 4590.801373][T23853] de00: 00000004 00000007 10000008 0000000f 00000007 00000004 0000fffe fffffff8 [ 4590.801875][T23853] de20: 00000000 fc68ac2c 00000000 84c07a80 844abd80 200000c0 40946400 864b8c00 [ 4590.802366][T23853] de40: e42edf14 e42ede50 813fb9b8 813fad70 00000000 fc68ac2c 00000000 00000000 [ 4590.802713][T23853] de60: 824b157c e42edea4 0000005f 84078c28 00000064 844c3e64 e42edee4 e42ede88 [ 4590.803122][T23853] de80: 807b48ac 807aac84 00000064 00000001 00000000 e42edea4 85f14b50 8342ff68 [ 4590.803521][T23853] dea0: 00006400 0000000b e42ede98 00000000 00000000 fc68ac2c 00000000 84c07a80 [ 4590.803835][T23853] dec0: 40946400 200000c0 200000c0 84c07a80 00000003 864b8c00 e42edef4 e42edee8 [ 4590.804152][T23853] dee0: 807b49dc fc68ac2c e42edf14 00000000 84c07a81 40946400 200000c0 84c07a80 [ 4590.804503][T23853] df00: 00000003 864b8c00 e42edfa4 e42edf18 805815f4 813fb8c0 ecac8b10 864b8c00 [ 4590.804767][ T28] audit: type=1400 audit(4590.710:1851): avc: denied { read } for pid=2896 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 4590.804803][T23853] df20: e42edf3c e42edf30 81aa9498 81aa9364 e42edf54 e42edf40 8025bb3c 8028f148 [ 4590.806144][ T28] audit: type=1400 audit(4590.710:1852): avc: denied { search } for pid=2896 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4590.806734][ T28] audit: type=1400 audit(4590.710:1853): avc: denied { search } for pid=2896 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4590.808096][T23853] df40: e42edfb0 40000000 e42edf84 e42edf58 80221a4c 8025baf8 00000000 8281d0bc [ 4590.808417][T23853] df60: e42edfb0 0013ddc0 ecac8b10 802219a0 00000000 fc68ac2c e42edfac 00000000 [ 4590.808794][T23853] df80: 00000000 00346310 00000036 8020029c 864b8c00 00000036 00000000 e42edfa8 [ 4590.809121][T23853] dfa0: 80200060 805813bc 00000000 00000000 00000003 40946400 200000c0 00000000 [ 4590.809434][T23853] dfc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f410dc [ 4590.809842][T23853] dfe0: 76f40e88 76f40e78 00018734 0012fc20 60000010 00000003 00000000 00000000 [ 4590.810280][T23853] Call trace: [ 4590.810893][T23853] [<81410870>] (subdev_8255_io) from [<814105ac>] (subdev_8255_do_config+0x58/0x60) [ 4590.817295][T23853] r7:00008001 r6:844abd80 r5:00008001 r4:81410870 [ 4590.821307][T23853] [<81410554>] (subdev_8255_do_config) from [<81410964>] (subdev_8255_io_init+0x88/0x98) [ 4590.821817][T23853] r4:86ba4000 [ 4590.821984][T23853] [<814108dc>] (subdev_8255_io_init) from [<81410b14>] (dev_8255_attach+0x74/0x120) [ 4590.822283][ T28] audit: type=1400 audit(4590.710:1854): avc: denied { add_name } for pid=2896 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4590.822347][T23853] r7:00008001 r6:86ba4000 r5:00000000 r4:844abd80 [ 4590.822380][T23853] [<81410aa0>] (dev_8255_attach) from [<813ff500>] (comedi_device_attach+0x10c/0x248) [ 4590.823021][ T28] audit: type=1400 audit(4590.710:1855): avc: denied { create } for pid=2896 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4590.823661][ T28] audit: type=1400 audit(4590.710:1856): avc: denied { append open } for pid=2896 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4590.824074][ T28] audit: type=1400 audit(4590.710:1857): avc: denied { getattr } for pid=2896 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4590.826434][T23853] r10:82b29b30 r9:00000000 r8:844abd80 r7:e42edd90 r6:00000000 r5:844abd80 [ 4590.826773][T23853] r4:829d5104 [ 4590.826942][T23853] [<813ff3f4>] (comedi_device_attach) from [<813fae38>] (do_devconfig_ioctl+0xd4/0x21c) [ 4590.827421][T23853] r10:844abdb0 r9:00000003 r8:864b8c00 r7:40946400 r6:b5403587 r5:844abd80 [ 4590.827736][T23853] r4:200000c0 [ 4590.827912][T23853] [<813fad64>] (do_devconfig_ioctl) from [<813fb9b8>] (comedi_unlocked_ioctl+0x104/0x1c80) [ 4590.828451][T23853] r8:864b8c00 r7:40946400 r6:200000c0 r5:844abd80 r4:84c07a80 [ 4590.828764][T23853] [<813fb8b4>] (comedi_unlocked_ioctl) from [<805815f4>] (sys_ioctl+0x244/0xb5c) [ 4590.829867][T23853] r10:864b8c00 r9:00000003 r8:84c07a80 r7:200000c0 r6:40946400 r5:84c07a81 [ 4590.830256][T23853] r4:00000000 [ 4590.830413][T23853] [<805813b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4590.831197][T23853] Exception stack(0xe42edfa8 to 0xe42edff0) [ 4590.831481][T23853] dfa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 4590.831826][T23853] dfc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f410dc [ 4590.832150][T23853] dfe0: 76f40e88 76f40e78 00018734 0012fc20 [ 4590.832394][T23853] r10:00000036 r9:864b8c00 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 4590.832741][T23853] r4:00000000 [ 4590.833183][T23853] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 4590.837148][T23853] ---[ end trace 0000000000000000 ]--- [ 4590.985947][T23853] Kernel panic - not syncing: Fatal exception [ 4590.988552][T23853] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:08:29 Registers: info registers vcpu 0 CPU#0 R00=82b19320 R01=a0000193 R02=864b8c00 R03=00006531 R04=82b18b10 R05=a0000193 R06=82959d48 R07=00000001 R08=00000000 R09=00000000 R10=00000e50 R11=e42ed8fc R12=e42ed900 R13=e42ed8f0 R14=80a2590c R15=81ab6f64 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=0000000a R02=76e64164 R03=0000000a R04=76e5fb2d R05=fffffffd R06=76e64e91 R07=7eafe7f8 R08=00000000 R09=00000000 R10=7eafe7bc R11=00000000 R12=7eafe858 R13=7eafe238 R14=76d56400 R15=76d4c9e0 PSR=80070010 N--- A S usr32 s00=20656c69 s01=72707845 d00=7270784520656c69 s02=20343535 s03=6e696154 d01=6e69615420343535 s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=6170206c s11=676e6967 d05=676e69676170206c s12=71657220 s13=74736575 d06=7473657571657220 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000