last executing test programs: 6.907120254s ago: executing program 4 (id=118): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x2401, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20000014) close(r1) 6.512561034s ago: executing program 4 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0xa21, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 6.17499811s ago: executing program 4 (id=123): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, 0x400}) 5.826340056s ago: executing program 4 (id=127): pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00030007"], 0xd) 5.440610399s ago: executing program 3 (id=129): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x6000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 5.221141151s ago: executing program 4 (id=131): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x80, &(0x7f0000000580)=@string={0x80, 0x3, "7a16c6f55cebe79d8946df87700cc46f033785da2f647961ee179e5891123d126aebc23d0b18d69612d87699e02a5a3564587d18f7d9044f68b5a34d7101e29d647f0844e0e8808e8f44e2f93ce9d6ba4139b7a16f61ca03e61b43e747bdb80cf36b4a5fbebbdc9c0d05b9753eecf0449098f298aaa659792dcda9a444a0"}}]}) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 4.925034855s ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}}, 0x0) 4.427412161s ago: executing program 2 (id=137): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) read$midi(r0, &(0x7f0000000240)=""/4096, 0x1000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 4.42435744s ago: executing program 1 (id=138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESDEC], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 3.8827321s ago: executing program 1 (id=140): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x6, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) 3.873481901s ago: executing program 2 (id=141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=@deltaction={0x14, 0x31, 0x0, 0x0, 0xfffffffc}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01) r1 = fcntl$dupfd(r0, 0x0, r0) poll(&(0x7f0000000080)=[{r1, 0x462}], 0x1, 0x40000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) 3.603312174s ago: executing program 0 (id=142): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) close_range(r0, r1, 0x0) 3.578604059s ago: executing program 1 (id=143): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}, {0x6}]}, 0x10) 3.433108701s ago: executing program 3 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 3.405013136s ago: executing program 2 (id=145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d5}]}, 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'virt_wifi0\x00', @random}) 3.227425921s ago: executing program 0 (id=146): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000400)="47eaf9d5", 0x4}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0xc00000000000, 0x0, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) 3.154582453s ago: executing program 1 (id=147): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x1, 0xfffe, 0x0, 0x5, 0xdf, 0x5, 0xf, 0x2000004, r2}, 0x20) 3.066992928s ago: executing program 2 (id=148): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.905329702s ago: executing program 4 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x52e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) 2.891906638s ago: executing program 0 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="11"], 0x1b0}, 0x0) 2.837754473s ago: executing program 1 (id=151): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 2.757183582s ago: executing program 3 (id=152): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r1}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000540)="f72b5a4fa8265231b28a0a546d06", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.325318761s ago: executing program 3 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 2.189974157s ago: executing program 2 (id=154): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.177114073s ago: executing program 0 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1.849524615s ago: executing program 3 (id=156): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 1.518934181s ago: executing program 0 (id=157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x4}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) 1.256424422s ago: executing program 3 (id=158): io_setup(0x9, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x8000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0xa0001011}) io_submit(r0, 0x2, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$eventfd(r2, &(0x7f0000000000), 0x8) 1.037183929s ago: executing program 0 (id=159): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xd4, 0x72, 0x8, 0x112a, 0x5, 0x14a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5a, 0x7, 0x66}}]}}]}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00', 0x4000040}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x22, @time={0x65757100}, 0x8, {}, 0x0, 0x1}) 0s ago: executing program 1 (id=160): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(r0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a00"], 0xd) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e04000000010902120001000000000904000000ef0401"], 0x0) kernel console output (not intermixed with test programs): [ 84.057814][ T29] audit: type=1400 audit(1727246646.076:78): avc: denied { transition } for pid=5088 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.086713][ T29] audit: type=1400 audit(1727246646.076:79): avc: denied { noatsecure } for pid=5088 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.106139][ T29] audit: type=1400 audit(1727246646.096:80): avc: denied { write } for pid=5088 comm="sh" path="pipe:[4279]" dev="pipefs" ino=4279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 84.129454][ T29] audit: type=1400 audit(1727246646.106:81): avc: denied { rlimitinh } for pid=5088 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.151331][ T29] audit: type=1400 audit(1727246646.106:82): avc: denied { siginh } for pid=5088 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.740566][ T29] audit: type=1400 audit(1727246646.756:83): avc: denied { write } for pid=5091 comm="sftp-server" path="pipe:[4290]" dev="pipefs" ino=4290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 85.261360][ T29] audit: type=1400 audit(1727246647.286:84): avc: denied { read } for pid=4656 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 85.290765][ T29] audit: type=1400 audit(1727246647.286:85): avc: denied { append } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.314635][ T29] audit: type=1400 audit(1727246647.286:86): avc: denied { open } for pid=4656 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.337871][ T29] audit: type=1400 audit(1727246647.286:87): avc: denied { getattr } for pid=4656 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 97.599119][ T944] cfg80211: failed to load regulatory.db [ 99.427159][ T29] audit: type=1400 audit(1727246661.446:88): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 99.439530][ T5212] cgroup: Unknown subsys name 'net' [ 99.450010][ T29] audit: type=1400 audit(1727246661.456:89): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 99.477482][ T29] audit: type=1400 audit(1727246661.486:90): avc: denied { unmount } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 99.645312][ T5212] cgroup: Unknown subsys name 'rlimit' [ 99.818941][ T29] audit: type=1400 audit(1727246661.836:91): avc: denied { setattr } for pid=5212 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.843185][ T29] audit: type=1400 audit(1727246661.846:92): avc: denied { create } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.880850][ T29] audit: type=1400 audit(1727246661.846:93): avc: denied { write } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.911455][ T29] audit: type=1400 audit(1727246661.846:94): avc: denied { read } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.932578][ T29] audit: type=1400 audit(1727246661.886:95): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 99.958018][ T29] audit: type=1400 audit(1727246661.886:96): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 99.981801][ T29] audit: type=1400 audit(1727246661.886:97): avc: denied { read } for pid=4888 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 100.014078][ T5216] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 101.886572][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.888539][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 104.888563][ T29] audit: type=1400 audit(1727246666.896:103): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 104.922868][ T29] audit: type=1400 audit(1727246666.896:104): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 104.954194][ T29] audit: type=1400 audit(1727246666.896:105): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.990932][ T29] audit: type=1400 audit(1727246666.896:106): avc: denied { create } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.036751][ T29] audit: type=1400 audit(1727246666.896:107): avc: denied { create } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.134421][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.145582][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.147195][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.154803][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.170111][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.176805][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.179525][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.187374][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.194695][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.201910][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.212374][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.220663][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.222188][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.228673][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.236197][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.245845][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.257528][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.264757][ T29] audit: type=1400 audit(1727246666.896:108): avc: denied { read write } for pid=5223 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.264854][ T29] audit: type=1400 audit(1727246666.896:109): avc: denied { read write } for pid=5224 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.264942][ T29] audit: type=1400 audit(1727246666.896:110): avc: denied { open } for pid=5223 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.265030][ T29] audit: type=1400 audit(1727246666.896:111): avc: denied { open } for pid=5224 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.289422][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.316027][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.336779][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.385050][ T29] audit: type=1400 audit(1727246666.946:112): avc: denied { ioctl } for pid=5225 comm="syz-executor" path="socket:[4375]" dev="sockfs" ino=4375 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.399975][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 105.423262][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.430391][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.439141][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.475405][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.484597][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.495587][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.503931][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.529270][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.536946][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.465290][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 106.649985][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 106.678239][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 106.939423][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 106.968333][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 107.052079][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.059966][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.067665][ T5224] bridge_slave_0: entered allmulticast mode [ 107.077762][ T5224] bridge_slave_0: entered promiscuous mode [ 107.091142][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.098375][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.106279][ T5224] bridge_slave_1: entered allmulticast mode [ 107.115073][ T5224] bridge_slave_1: entered promiscuous mode [ 107.345835][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.353163][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.361231][ T5233] bridge_slave_0: entered allmulticast mode [ 107.369542][ T5233] bridge_slave_0: entered promiscuous mode [ 107.377664][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.386033][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.393716][ T5223] bridge_slave_0: entered allmulticast mode [ 107.401588][ T5223] bridge_slave_0: entered promiscuous mode [ 107.424801][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.447963][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.455371][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.463293][ T5233] bridge_slave_1: entered allmulticast mode [ 107.471756][ T5233] bridge_slave_1: entered promiscuous mode [ 107.501513][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.509332][ T54] Bluetooth: hci0: command tx timeout [ 107.509363][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.514972][ T5223] bridge_slave_1: entered allmulticast mode [ 107.531084][ T5223] bridge_slave_1: entered promiscuous mode [ 107.579679][ T5240] Bluetooth: hci2: command tx timeout [ 107.585543][ T5240] Bluetooth: hci3: command tx timeout [ 107.590322][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.591744][ T54] Bluetooth: hci1: command tx timeout [ 107.658651][ T54] Bluetooth: hci4: command tx timeout [ 107.681010][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.688317][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.695658][ T5225] bridge_slave_0: entered allmulticast mode [ 107.704413][ T5225] bridge_slave_0: entered promiscuous mode [ 107.762692][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.778330][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.791970][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.809230][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.839843][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.847156][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.855221][ T5225] bridge_slave_1: entered allmulticast mode [ 107.863429][ T5225] bridge_slave_1: entered promiscuous mode [ 107.976177][ T5224] team0: Port device team_slave_0 added [ 107.984222][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.991844][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.999732][ T5226] bridge_slave_0: entered allmulticast mode [ 108.007536][ T5226] bridge_slave_0: entered promiscuous mode [ 108.042989][ T5223] team0: Port device team_slave_0 added [ 108.056410][ T5223] team0: Port device team_slave_1 added [ 108.088002][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.101525][ T5224] team0: Port device team_slave_1 added [ 108.108106][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.116424][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.124261][ T5226] bridge_slave_1: entered allmulticast mode [ 108.132471][ T5226] bridge_slave_1: entered promiscuous mode [ 108.145943][ T5233] team0: Port device team_slave_0 added [ 108.156813][ T5233] team0: Port device team_slave_1 added [ 108.187112][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.374858][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.382035][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.408777][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.426766][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.434369][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.461985][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.478210][ T5225] team0: Port device team_slave_0 added [ 108.486695][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.493886][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.519907][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.535563][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.551455][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.561861][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.569342][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.595570][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.625721][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.633088][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.659466][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.674172][ T5225] team0: Port device team_slave_1 added [ 108.701333][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.708314][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.735201][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.815144][ T5226] team0: Port device team_slave_0 added [ 108.845118][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.852443][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.879063][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.910961][ T5226] team0: Port device team_slave_1 added [ 108.917970][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.925418][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.952908][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.111403][ T5233] hsr_slave_0: entered promiscuous mode [ 109.118309][ T5233] hsr_slave_1: entered promiscuous mode [ 109.158750][ T5223] hsr_slave_0: entered promiscuous mode [ 109.165691][ T5223] hsr_slave_1: entered promiscuous mode [ 109.173497][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.182579][ T5223] Cannot create hsr debugfs directory [ 109.239584][ T5224] hsr_slave_0: entered promiscuous mode [ 109.247939][ T5224] hsr_slave_1: entered promiscuous mode [ 109.254796][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.262983][ T5224] Cannot create hsr debugfs directory [ 109.295474][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.302643][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.329622][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.424886][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.432060][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.458542][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.513898][ T5225] hsr_slave_0: entered promiscuous mode [ 109.521378][ T5225] hsr_slave_1: entered promiscuous mode [ 109.528028][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.536452][ T5225] Cannot create hsr debugfs directory [ 109.578658][ T54] Bluetooth: hci0: command tx timeout [ 109.659610][ T5240] Bluetooth: hci3: command tx timeout [ 109.665098][ T5240] Bluetooth: hci2: command tx timeout [ 109.670900][ T54] Bluetooth: hci1: command tx timeout [ 109.740833][ T5240] Bluetooth: hci4: command tx timeout [ 109.931561][ T5226] hsr_slave_0: entered promiscuous mode [ 109.938534][ T5226] hsr_slave_1: entered promiscuous mode [ 109.945204][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.953202][ T5226] Cannot create hsr debugfs directory [ 110.440274][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.484301][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.499686][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.523755][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.652046][ T5233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.674409][ T5233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.688121][ T5233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.711514][ T5233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.859561][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.887074][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.903013][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.916994][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.175169][ T5224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.214179][ T5224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.228373][ T5224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.248022][ T5224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.307591][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.421394][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.467570][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.475274][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.501290][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.513438][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.527033][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.547745][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.583276][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.616895][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.624228][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.660925][ T5240] Bluetooth: hci0: command tx timeout [ 111.691503][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.747352][ T5240] Bluetooth: hci2: command tx timeout [ 111.749519][ T5238] Bluetooth: hci3: command tx timeout [ 111.758768][ T54] Bluetooth: hci1: command tx timeout [ 111.761310][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.771453][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.819671][ T54] Bluetooth: hci4: command tx timeout [ 111.847338][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.854642][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.015424][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.147658][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.270857][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.282172][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.289463][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.300597][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 112.300627][ T29] audit: type=1400 audit(1727246674.326:117): avc: denied { sys_module } for pid=5223 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.393166][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.400487][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.491907][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.675693][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.708136][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.715418][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.764662][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.771973][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.802313][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.857594][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.864899][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.924725][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.932039][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.016144][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.042285][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.465412][ T5223] veth0_vlan: entered promiscuous mode [ 113.562968][ T5223] veth1_vlan: entered promiscuous mode [ 113.602985][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.739987][ T54] Bluetooth: hci0: command tx timeout [ 113.820291][ T54] Bluetooth: hci2: command tx timeout [ 113.831617][ T54] Bluetooth: hci1: command tx timeout [ 113.837090][ T54] Bluetooth: hci3: command tx timeout [ 113.907970][ T5223] veth0_macvtap: entered promiscuous mode [ 113.908495][ T54] Bluetooth: hci4: command tx timeout [ 113.940793][ T5223] veth1_macvtap: entered promiscuous mode [ 114.001941][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.033492][ T5225] veth0_vlan: entered promiscuous mode [ 114.088247][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.103895][ T5225] veth1_vlan: entered promiscuous mode [ 114.137472][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.176943][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.186231][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.195968][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.204837][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.373692][ T5224] veth0_vlan: entered promiscuous mode [ 114.430543][ T5225] veth0_macvtap: entered promiscuous mode [ 114.438654][ T5233] veth0_vlan: entered promiscuous mode [ 114.486415][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.510885][ T5225] veth1_macvtap: entered promiscuous mode [ 114.521351][ T5224] veth1_vlan: entered promiscuous mode [ 114.567804][ T5233] veth1_vlan: entered promiscuous mode [ 114.660084][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.684774][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.762206][ T5224] veth0_macvtap: entered promiscuous mode [ 114.780194][ T5224] veth1_macvtap: entered promiscuous mode [ 114.831888][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.844977][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.857806][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.906452][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.915850][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.935889][ T5233] veth0_macvtap: entered promiscuous mode [ 114.946745][ T29] audit: type=1400 audit(1727246676.976:118): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.kxJP40/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 114.977426][ T29] audit: type=1400 audit(1727246676.996:119): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.999057][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.014542][ T29] audit: type=1400 audit(1727246676.996:120): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.kxJP40/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.018331][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.050918][ T29] audit: type=1400 audit(1727246676.996:121): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 115.051007][ T29] audit: type=1400 audit(1727246677.036:122): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.100353][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.111141][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.126622][ T29] audit: type=1400 audit(1727246677.146:123): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 115.149934][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.159180][ T29] audit: type=1400 audit(1727246677.146:124): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.202269][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.222213][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.242274][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.258192][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.270614][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.282359][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.292923][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.305295][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.331767][ T5233] veth1_macvtap: entered promiscuous mode [ 115.346835][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.357109][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.366023][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.376412][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.392011][ T5226] veth0_vlan: entered promiscuous mode [ 115.413258][ T5224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.416969][ T29] audit: type=1400 audit(1727246677.436:125): avc: denied { read write } for pid=5223 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.427383][ T5224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.462368][ T5224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.472345][ T5224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.508581][ T29] audit: type=1400 audit(1727246677.486:126): avc: denied { open } for pid=5223 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.551588][ T5226] veth1_vlan: entered promiscuous mode [ 115.682029][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.697026][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.707424][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.719602][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.730204][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.741486][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.757565][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.825200][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.838088][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.848870][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.859443][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.869927][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.881076][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.897251][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.988963][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.996858][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.029875][ T5233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.053429][ T5233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.068037][ T5233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.078109][ T5233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.117195][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.134580][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.184994][ T5226] veth0_macvtap: entered promiscuous mode [ 116.237899][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.241313][ T5226] veth1_macvtap: entered promiscuous mode [ 116.253632][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.445564][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.457561][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.580406][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.582026][ T5312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.632647][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.658477][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.690508][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.719349][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.730863][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.740792][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.751366][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.764654][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.809950][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.818847][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.855314][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.898917][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.930187][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.953846][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.990331][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.031453][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.051675][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.080430][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.098125][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.217485][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.238213][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.255592][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.274651][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.404392][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 117.404417][ T29] audit: type=1400 audit(1727246679.426:134): avc: denied { mount } for pid=5322 comm="syz.3.10" name="/" dev="hugetlbfs" ino=7021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.486143][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.510629][ T29] audit: type=1400 audit(1727246679.526:135): avc: denied { remount } for pid=5322 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.519471][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.597016][ T29] audit: type=1400 audit(1727246679.616:136): avc: denied { create } for pid=5324 comm="syz.2.3" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.680800][ T29] audit: type=1400 audit(1727246679.636:137): avc: denied { mounton } for pid=5233 comm="syz-executor" path="/root/syzkaller.f20Zyn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.719115][ T29] audit: type=1400 audit(1727246679.696:138): avc: denied { name_bind } for pid=5326 comm="syz.0.11" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 117.799621][ T29] audit: type=1400 audit(1727246679.696:139): avc: denied { ioctl } for pid=5324 comm="syz.2.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7025 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.886816][ T29] audit: type=1400 audit(1727246679.736:140): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.975123][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.995880][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.115626][ T29] audit: type=1400 audit(1727246680.115:141): avc: denied { read write } for pid=5332 comm="syz.4.5" name="vmci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.211840][ T29] audit: type=1400 audit(1727246680.125:142): avc: denied { open } for pid=5332 comm="syz.4.5" path="/dev/vmci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.278086][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.289698][ T29] audit: type=1400 audit(1727246680.135:143): avc: denied { map_create } for pid=5332 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.344480][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.891516][ T5341] syz.4.15[5341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.891792][ T5341] syz.4.15[5341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.437317][ T1194] kernel write not supported for file /8/net/snmp6 (pid: 1194 comm: kworker/0:3) [ 119.831509][ T5356] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21'. [ 119.920025][ T5358] warning: `syz.4.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.115431][ T5361] Zero length message leads to an empty skb [ 120.943100][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 120.971705][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 120.987374][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.005765][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.028493][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.048535][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.056008][ T5287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.127822][ T5287] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 121.260655][ T54] Bluetooth: hci4: command tx timeout [ 121.546230][ T5395] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 121.790957][ T5398] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 122.426359][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 122.426384][ T29] audit: type=1400 audit(1727246684.445:183): avc: denied { block_suspend } for pid=5411 comm="syz.1.46" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.642511][ T29] audit: type=1400 audit(1727246684.665:184): avc: denied { setopt } for pid=5414 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.067006][ T29] audit: type=1400 audit(1727246685.085:185): avc: denied { create } for pid=5421 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.153754][ T29] audit: type=1400 audit(1727246685.105:186): avc: denied { write } for pid=5421 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.259566][ T29] audit: type=1400 audit(1727246685.125:187): avc: denied { map } for pid=5424 comm="syz.4.51" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.368531][ T29] audit: type=1400 audit(1727246685.125:188): avc: denied { read write } for pid=5424 comm="syz.4.51" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.496200][ T29] audit: type=1400 audit(1727246685.225:189): avc: denied { read } for pid=5424 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.619825][ T5430] batadv_slave_1: entered allmulticast mode [ 123.639680][ T5430] batadv_slave_1: left allmulticast mode [ 123.932976][ T29] audit: type=1400 audit(1727246685.955:190): avc: denied { read } for pid=5433 comm="syz.0.55" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.038781][ T29] audit: type=1400 audit(1727246686.055:191): avc: denied { create } for pid=5439 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.092285][ T29] audit: type=1400 audit(1727246686.095:192): avc: denied { connect } for pid=5439 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.492520][ T143] wlan0: Trigger new scan to find an IBSS to join [ 124.502701][ T5447] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 124.896461][ T5450] mmap: syz.2.61 (5450) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.443044][ T5456] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 125.450113][ T5456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.511590][ T5456] vhci_hcd vhci_hcd.0: Device attached [ 125.614525][ T5457] usbip_core: unknown command [ 125.624168][ T5457] vhci_hcd: unknown pdu 0 [ 125.632825][ T5457] usbip_core: unknown command [ 125.662538][ T1056] vhci_hcd: stop threads [ 125.668187][ T1056] vhci_hcd: release socket [ 125.704457][ T1056] vhci_hcd: disconnect device [ 125.783125][ T5463] input: syz0 as /devices/virtual/input/input5 [ 125.793557][ T5309] vhci_hcd: vhci_device speed not set [ 126.063742][ T5470] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.134126][ T1194] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.384476][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.413072][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 126.457740][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.492363][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.536451][ T1194] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.566681][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.642468][ T1194] usb 2-1: config 0 descriptor?? [ 126.692415][ T5466] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.694646][ T5480] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 126.764393][ T5480] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 126.878958][ T5486] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 126.887031][ T5486] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.74'. [ 126.977306][ T5486] netlink: 'syz.0.74': attribute type 2 has an invalid length. [ 126.995114][ T5486] netlink: 177 bytes leftover after parsing attributes in process `syz.0.74'. [ 127.267510][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 127.284355][ T1194] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 127.333947][ T1194] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 127.420037][ T1194] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 127.567069][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 127.567094][ T29] audit: type=1400 audit(1727246689.585:210): avc: denied { map } for pid=5498 comm="syz.4.81" path="socket:[8321]" dev="sockfs" ino=8321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.681930][ T29] audit: type=1400 audit(1727246689.625:211): avc: denied { read accept } for pid=5498 comm="syz.4.81" path="socket:[8321]" dev="sockfs" ino=8321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.910351][ T29] audit: type=1400 audit(1727246689.935:212): avc: denied { write } for pid=5503 comm="syz.2.82" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.913440][ T46] usb 2-1: USB disconnect, device number 2 [ 128.036559][ T29] audit: type=1400 audit(1727246690.055:213): avc: denied { create } for pid=5506 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.123482][ T29] audit: type=1400 audit(1727246690.095:214): avc: denied { getopt } for pid=5506 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.773332][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.008484][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 129.030781][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.059013][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 129.099150][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.142640][ T8] usb 4-1: config 0 descriptor?? [ 129.163596][ T29] audit: type=1400 audit(1727246691.175:215): avc: denied { open } for pid=5526 comm="syz.4.93" path="/dev/ptyqd" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 129.206735][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 129.241092][ T5524] Falling back ldisc for ttyS3. [ 129.316321][ T29] audit: type=1400 audit(1727246691.335:216): avc: denied { ioctl } for pid=5526 comm="syz.4.93" path="/dev/ptyqd" dev="devtmpfs" ino=134 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 129.419261][ T3624] wlan0: Trigger new scan to find an IBSS to join [ 129.604504][ T29] audit: type=1400 audit(1727246691.625:217): avc: denied { read write } for pid=5530 comm="syz.0.95" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.693022][ T29] audit: type=1400 audit(1727246691.625:218): avc: denied { open } for pid=5530 comm="syz.0.95" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.788658][ T29] audit: type=1400 audit(1727246691.655:219): avc: denied { ioctl } for pid=5530 comm="syz.0.95" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.929498][ T5541] syz.4.97: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 129.930410][ T5541] CPU: 0 UID: 0 PID: 5541 Comm: syz.4.97 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 129.930453][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 129.930486][ T5541] Call Trace: [ 129.930499][ T5541] [ 129.930514][ T5541] dump_stack_lvl+0x16c/0x1f0 [ 129.930574][ T5541] warn_alloc+0x24d/0x3a0 [ 129.930617][ T5541] ? __pfx_warn_alloc+0x10/0x10 [ 129.930655][ T5541] ? stack_depot_save_flags+0x31b/0x8f0 [ 129.930715][ T5541] ? kasan_save_stack+0x42/0x60 [ 129.930768][ T5541] ? kasan_save_stack+0x33/0x60 [ 129.930820][ T5541] ? kasan_save_track+0x14/0x30 [ 129.930872][ T5541] ? __kasan_kmalloc+0xaa/0xb0 [ 129.930923][ T5541] ? xskq_create+0x52/0x1d0 [ 129.930957][ T5541] ? xsk_setsockopt+0x757/0xa10 [ 129.930991][ T5541] ? __sys_setsockopt+0x1a4/0x270 [ 129.931038][ T5541] ? __x64_sys_setsockopt+0xbd/0x160 [ 129.931088][ T5541] ? do_syscall_64+0xcd/0x250 [ 129.931134][ T5541] __vmalloc_node_range_noprof+0x10a3/0x14e0 [ 129.931192][ T5541] ? xskq_create+0xfb/0x1d0 [ 129.931238][ T5541] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.931300][ T5541] ? xskq_create+0xfb/0x1d0 [ 129.931338][ T5541] vmalloc_user_noprof+0x6b/0x90 [ 129.931380][ T5541] ? xskq_create+0xfb/0x1d0 [ 129.931416][ T5541] xskq_create+0xfb/0x1d0 [ 129.931456][ T5541] xsk_setsockopt+0x757/0xa10 [ 129.931494][ T5541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.931546][ T5541] ? selinux_socket_setsockopt+0x6a/0x80 [ 129.931598][ T5541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.931634][ T5541] do_sock_setsockopt+0x222/0x480 [ 129.931672][ T5541] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 129.931714][ T5541] ? __fget_files+0x244/0x3f0 [ 129.931763][ T5541] ? __fget_light+0x173/0x210 [ 129.931808][ T5541] __sys_setsockopt+0x1a4/0x270 [ 129.931862][ T5541] ? __pfx___sys_setsockopt+0x10/0x10 [ 129.931911][ T5541] ? handle_mm_fault+0x52d/0xa60 [ 129.931970][ T5541] __x64_sys_setsockopt+0xbd/0x160 [ 129.932018][ T5541] ? do_syscall_64+0x91/0x250 [ 129.932054][ T5541] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.932109][ T5541] do_syscall_64+0xcd/0x250 [ 129.932150][ T5541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.932206][ T5541] RIP: 0033:0x7f1f5837def9 [ 129.932242][ T5541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.932282][ T5541] RSP: 002b:00007f1f591d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.932318][ T5541] RAX: ffffffffffffffda RBX: 00007f1f58536058 RCX: 00007f1f5837def9 [ 129.932343][ T5541] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 129.932367][ T5541] RBP: 00007f1f583f0b76 R08: 0000000000000020 R09: 0000000000000000 [ 129.932391][ T5541] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 129.932414][ T5541] R13: 0000000000000001 R14: 00007f1f58536058 R15: 00007ffef2bcea18 [ 129.932461][ T5541] [ 129.932509][ T5541] Mem-Info: [ 129.932528][ T5541] active_anon:4533 inactive_anon:0 isolated_anon:0 [ 129.932528][ T5541] active_file:1210 inactive_file:38441 isolated_file:0 [ 129.932528][ T5541] unevictable:768 dirty:223 writeback:0 [ 129.932528][ T5541] slab_reclaimable:9552 slab_unreclaimable:95640 [ 129.932528][ T5541] mapped:21273 shmem:1252 pagetables:795 [ 129.932528][ T5541] sec_pagetables:0 bounce:0 [ 129.932528][ T5541] kernel_misc_reclaimable:0 [ 129.932528][ T5541] free:1366542 free_pcp:495 free_cma:0 [ 129.932647][ T5541] Node 0 active_anon:18132kB inactive_anon:0kB active_file:4840kB inactive_file:153696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85092kB dirty:888kB writeback:0kB shmem:3472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10256kB pagetables:3180kB sec_pagetables:0kB all_unreclaimable? no [ 129.932741][ T5541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 129.956862][ T5541] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.956978][ T5541] lowmem_reserve[]: 0 2467 2468 0 0 [ 129.957035][ T5541] Node 0 DMA32 free:1503408kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:18212kB inactive_anon:0kB active_file:4840kB inactive_file:152888kB unevictable:1536kB writepending:880kB present:3129332kB managed:2553248kB mlocked:0kB bounce:0kB free_pcp:1692kB local_pcp:784kB free_cma:0kB [ 129.957144][ T5541] lowmem_reserve[]: 0 0 0 0 0 [ 129.957197][ T5541] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 129.957308][ T5541] lowmem_reserve[]: 0 0 0 0 0 [ 129.957361][ T5541] Node 1 Normal free:3948312kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.957468][ T5541] lowmem_reserve[]: 0 0 0 0 0 [ 129.957522][ T5541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.957834][ T5541] Node 0 DMA32: 205*4kB (UE) 596*8kB (UE) 345*16kB (UE) 91*32kB (UME) 49*64kB (UME) 27*128kB (UME) 16*256kB (UME) 8*512kB (UME) 2*1024kB (M) 1*2048kB (U) 359*4096kB (M) = 1503364kB [ 129.958134][ T5541] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 129.958347][ T5541] Node 1 Normal: 10*4kB (UM) 6*8kB (UM) 8*16kB (UM) 10*32kB (UM) 8*64kB (U) 2*128kB (U) 6*256kB (UM) 2*512kB (UM) 4*1024kB (U) 2*2048kB (U) 961*4096kB (UM) = 3948312kB [ 129.958925][ T5541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.958956][ T5541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.958986][ T5541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.959015][ T5541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.959072][ T5541] 40903 total pagecache pages [ 129.959086][ T5541] 0 pages in swap cache [ 129.959098][ T5541] Free swap = 124704kB [ 129.959111][ T5541] Total swap = 124996kB [ 129.959125][ T5541] 2097051 pages RAM [ 129.959138][ T5541] 0 pages HighMem/MovableOnly [ 129.959151][ T5541] 427401 pages reserved [ 129.959163][ T5541] 0 pages cma reserved [ 130.387552][ T35] wlan0: Creating new IBSS network, BSSID aa:c4:fb:78:39:73 [ 130.490584][ T8] gspca_vc032x: reg_w err -71 [ 130.490761][ T8] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 130.516445][ T8] usb 4-1: USB disconnect, device number 2 [ 130.660894][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 131.587127][ T5562] syz.0.106 (5562) used greatest stack depth: 21808 bytes left [ 131.662143][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 132.588609][ T5287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.809306][ T5287] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 132.847426][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.879192][ T5287] usb 3-1: Product: syz [ 132.883438][ T5287] usb 3-1: Manufacturer: syz [ 132.888092][ T5287] usb 3-1: SerialNumber: syz [ 132.908160][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 132.908182][ T29] audit: type=1400 audit(1727246694.925:238): avc: denied { create } for pid=5594 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 132.952464][ T5287] r8152-cfgselector 3-1: Unknown version 0x0000 [ 132.974078][ T5287] r8152-cfgselector 3-1: config 0 descriptor?? [ 133.002364][ T29] audit: type=1400 audit(1727246694.965:239): avc: denied { ioctl } for pid=5594 comm="syz.4.121" path="socket:[7753]" dev="sockfs" ino=7753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.118041][ T29] audit: type=1400 audit(1727246695.095:240): avc: denied { sys_module } for pid=5592 comm="syz.1.120" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.625411][ T29] audit: type=1400 audit(1727246695.635:241): avc: denied { read } for pid=5607 comm="syz.1.125" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.658170][ T8] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 133.708132][ T29] audit: type=1400 audit(1727246695.635:242): avc: denied { open } for pid=5607 comm="syz.1.125" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.714535][ T5609] Bluetooth: MGMT ver 1.23 [ 133.750843][ T29] audit: type=1400 audit(1727246695.685:243): avc: denied { ioctl } for pid=5607 comm="syz.1.125" path="/dev/dri/card0" dev="devtmpfs" ino=629 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.825000][ T29] audit: type=1400 audit(1727246695.705:244): avc: denied { bind } for pid=5608 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.917026][ T29] audit: type=1400 audit(1727246695.715:245): avc: denied { map } for pid=5607 comm="syz.1.125" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 134.081863][ T29] audit: type=1400 audit(1727246696.105:246): avc: denied { create } for pid=5615 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.147839][ T29] audit: type=1400 audit(1727246696.165:247): avc: denied { ioctl } for pid=5615 comm="syz.0.130" path="socket:[8491]" dev="sockfs" ino=8491 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.328098][ T5622] caif0: entered allmulticast mode [ 134.347254][ T5622] netlink: 116 bytes leftover after parsing attributes in process `syz.1.132'. [ 134.365330][ T5622] caif0 (unregistering): left allmulticast mode [ 134.450730][ T5309] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.622767][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.668677][ T5309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.690547][ T5309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.709266][ T5309] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 134.740821][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.787779][ T5309] usb 4-1: config 0 descriptor?? [ 134.828546][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 134.867632][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.898800][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.948707][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.988637][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 135.037930][ T5636] netlink: 'syz.1.138': attribute type 9 has an invalid length. [ 135.038531][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.071677][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 135.085647][ T5309] usbhid 4-1:0.0: can't add hid device: -71 [ 135.087816][ T5636] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.138'. [ 135.101832][ T5309] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.113263][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.124720][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.143777][ T25] usb 5-1: Product: syz [ 135.160093][ T25] usb 5-1: Manufacturer: syz [ 135.164931][ T5309] usb 4-1: USB disconnect, device number 3 [ 135.181231][ T25] usb 5-1: SerialNumber: syz [ 135.517732][ T25] cdc_ncm 5-1:1.0: bind() failure [ 135.557134][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 135.578009][ T25] cdc_ncm 5-1:1.1: bind() failure [ 135.602497][ T25] usb 5-1: USB disconnect, device number 2 [ 136.604071][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 136.651767][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 136.688491][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 136.699565][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 136.743791][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 136.918488][ T1194] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.159011][ T1194] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.193522][ T1194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.235082][ T1194] usb 2-1: Product: syz [ 137.245999][ T1194] usb 2-1: Manufacturer: syz [ 137.264792][ T1194] usb 2-1: SerialNumber: syz [ 137.336196][ T1194] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.496326][ T5287] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.520306][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.738766][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 137.796051][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 137.846158][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.878555][ T25] usb 3-1: Product: syz [ 137.891695][ T25] usb 3-1: Manufacturer: syz [ 137.923755][ T25] usb 3-1: SerialNumber: syz [ 137.959902][ T25] usb 3-1: config 0 descriptor?? [ 138.002472][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 138.002496][ T29] audit: type=1400 audit(1727246700.025:265): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 138.060341][ T5693] netlink: 'syz.0.157': attribute type 1 has an invalid length. [ 138.547048][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.575396][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.648751][ T25] airspy 3-1:0.0: Board ID: 00 [ 138.666731][ T25] airspy 3-1:0.0: Firmware version: [ 138.875985][ T5276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.108607][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 139.189000][ T5276] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 139.258238][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.320807][ T5276] usb 1-1: Product: syz [ 139.378267][ T5276] usb 1-1: Manufacturer: syz [ 139.383806][ T5276] usb 1-1: SerialNumber: syz [ 139.469834][ T5276] usb 1-1: config 0 descriptor?? [ 139.494224][ T25] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 139.549348][ T5276] redrat3 1-1:0.0: Couldn't find all endpoints [ 139.624911][ T25] airspy 3-1:0.0: Registered as swradio16 [ 139.667488][ T29] audit: type=1400 audit(1727246701.685:266): avc: denied { listen } for pid=5696 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.690017][ T25] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 139.809202][ T25] usb 3-1: USB disconnect, device number 3 [ 140.584361][ T25] usb 1-1: USB disconnect, device number 2 [ 141.742318][ T54] Bluetooth: hci3: command tx timeout [ 148.198812][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.210008][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.218839][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.227768][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.247751][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.255616][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.283693][ T29] audit: type=1400 audit(1727246710.295:267): avc: denied { mounton } for pid=5702 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 150.448971][ T5238] Bluetooth: hci5: command tx timeout [ 150.609318][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.628603][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.736434][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.994318][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.097945][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.149099][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.419242][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.448846][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.466964][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.483479][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.516475][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.527884][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.928774][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 151.940105][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 151.949640][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 151.961144][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 151.970042][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 151.977669][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 152.547431][ T5238] Bluetooth: hci5: command tx timeout [ 153.189603][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 153.201287][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 153.214687][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 153.224708][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 153.234498][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 153.242408][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 153.403312][ T5702] chnl_net:caif_netlink_parms(): no params data found [ 153.418889][ T54] Bluetooth: hci6: command tx timeout [ 153.578932][ T54] Bluetooth: hci7: command tx timeout [ 154.068553][ T54] Bluetooth: hci8: command tx timeout [ 154.627399][ T54] Bluetooth: hci5: command tx timeout [ 155.344432][ T54] Bluetooth: hci9: command tx timeout [ 155.524647][ T54] Bluetooth: hci6: command tx timeout [ 155.667227][ T54] Bluetooth: hci7: command tx timeout [ 156.139053][ T54] Bluetooth: hci8: command tx timeout [ 156.714396][ T54] Bluetooth: hci5: command tx timeout [ 157.420295][ T54] Bluetooth: hci9: command tx timeout [ 157.588642][ T54] Bluetooth: hci6: command tx timeout [ 157.748490][ T54] Bluetooth: hci7: command tx timeout [ 158.229287][ T54] Bluetooth: hci8: command tx timeout [ 159.509478][ T54] Bluetooth: hci9: command tx timeout [ 159.668612][ T54] Bluetooth: hci6: command tx timeout [ 159.834319][ T54] Bluetooth: hci7: command tx timeout [ 160.298563][ T54] Bluetooth: hci8: command tx timeout [ 161.578892][ T54] Bluetooth: hci9: command tx timeout [ 164.780722][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2628 jiffies s: 1881 root: 0x1/. [ 164.811887][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 164.840141][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 164.876586][ T19] Sending NMI from CPU 1 to CPUs 0: [ 164.882010][ C0] NMI backtrace for cpu 0 [ 164.882032][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 164.882063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 164.882081][ C0] Workqueue: events nsim_dev_trap_report_work [ 164.882120][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x70 [ 164.882167][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 d4 ff 77 7e 65 8b 05 d5 ff 77 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 [ 164.882192][ C0] RSP: 0018:ffffc90000006c38 EFLAGS: 00000002 [ 164.882211][ C0] RAX: 0000000000010105 RBX: ffffc90000006cc0 RCX: ffffffff813d013d [ 164.882229][ C0] RDX: ffff88801cebda00 RSI: ffffffff813d0218 RDI: ffffffff918fe35c [ 164.882247][ C0] RBP: 0000000000000002 R08: 0000000000000004 R09: 00000000000a17fd [ 164.882263][ C0] R10: 00000000000a4000 R11: 0000000000000000 R12: ffffffff8b17fdb4 [ 164.882280][ C0] R13: ffffffff91602870 R14: 00000000001e8d3a R15: ffffc90000006cf5 [ 164.882298][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 164.882324][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.882342][ C0] CR2: 0000001b3240eff8 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 164.882359][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.882375][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.882391][ C0] Call Trace: [ 164.882399][ C0] [ 164.882408][ C0] ? show_regs+0x8c/0xa0 [ 164.882449][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 164.882490][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 164.882529][ C0] ? nmi_handle+0x1a9/0x5c0 [ 164.882554][ C0] ? __sanitizer_cov_trace_pc+0x23/0x70 [ 164.882597][ C0] ? default_do_nmi+0x6a/0x160 [ 164.882631][ C0] ? exc_nmi+0x170/0x1e0 [ 164.882663][ C0] ? end_repeat_nmi+0xf/0x53 [ 164.882688][ C0] ? sysvec_apic_timer_interrupt+0x94/0xb0 [ 164.882730][ C0] ? unwind_next_frame+0x23d/0x23a0 [ 164.882757][ C0] ? unwind_next_frame+0x318/0x23a0 [ 164.882783][ C0] ? __sanitizer_cov_trace_pc+0x23/0x70 [ 164.882831][ C0] ? __sanitizer_cov_trace_pc+0x23/0x70 [ 164.882875][ C0] ? __sanitizer_cov_trace_pc+0x23/0x70 [ 164.882918][ C0] [ 164.882925][ C0] [ 164.882933][ C0] unwind_next_frame+0x318/0x23a0 [ 164.882961][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 164.883003][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.883039][ C0] arch_stack_walk+0x100/0x170 [ 164.883072][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 164.883114][ C0] ? dummy_timer+0x1750/0x38d0 [ 164.883154][ C0] stack_trace_save+0x95/0xd0 [ 164.883187][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 164.883222][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 164.883266][ C0] kasan_save_stack+0x33/0x60 [ 164.883306][ C0] ? kasan_save_stack+0x33/0x60 [ 164.883344][ C0] ? kasan_save_track+0x14/0x30 [ 164.883382][ C0] ? kasan_save_free_info+0x3b/0x60 [ 164.883415][ C0] ? poison_slab_object+0xf7/0x160 [ 164.883454][ C0] ? __kasan_slab_free+0x32/0x50 [ 164.883476][ C0] ? kfree+0x12a/0x3b0 [ 164.883510][ C0] ? dummy_timer+0x1750/0x38d0 [ 164.883547][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 164.883576][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 164.883604][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 164.883631][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 164.883670][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.883712][ C0] ? stack_access_ok+0x96/0x270 [ 164.883737][ C0] ? unwind_next_frame+0xd9b/0x23a0 [ 164.883762][ C0] ? arch_stack_walk+0x100/0x170 [ 164.883789][ C0] ? stack_trace_save+0x95/0xd0 [ 164.883825][ C0] ? kasan_save_stack+0x33/0x60 [ 164.883864][ C0] ? kasan_save_track+0x14/0x30 [ 164.883902][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 164.883925][ C0] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 164.883968][ C0] ? __alloc_skb+0x2b1/0x380 [ 164.884001][ C0] ? skb_copy+0x1c9/0x3a0 [ 164.884035][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 164.884079][ C0] ? mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 164.884119][ C0] ? mac80211_hwsim_beacon_tx+0x592/0xa00 [ 164.884159][ C0] ? __iterate_interfaces+0x2d0/0x5d0 [ 164.884197][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 164.884242][ C0] ? mac80211_hwsim_beacon+0x105/0x200 [ 164.884274][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 164.884301][ C0] ? hrtimer_run_softirq+0x17d/0x350 [ 164.884329][ C0] ? handle_softirqs+0x216/0x8f0 [ 164.884357][ C0] ? irq_exit_rcu+0xbb/0x120 [ 164.884384][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 164.884439][ C0] kasan_save_track+0x14/0x30 [ 164.884479][ C0] kasan_save_free_info+0x3b/0x60 [ 164.884513][ C0] poison_slab_object+0xf7/0x160 [ 164.884555][ C0] __kasan_slab_free+0x32/0x50 [ 164.884579][ C0] kfree+0x12a/0x3b0 [ 164.884615][ C0] ? dummy_timer+0x1750/0x38d0 [ 164.884656][ C0] dummy_timer+0x1750/0x38d0 [ 164.884699][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 164.884731][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 164.884778][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 164.884806][ C0] ? __pfx_lock_release+0x10/0x10 [ 164.884852][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 164.884891][ C0] ? timerqueue_del+0x83/0x150 [ 164.884930][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 164.884967][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 164.885002][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 164.885033][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 164.885078][ C0] hrtimer_interrupt+0x31b/0x800 [ 164.885117][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 164.885147][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 164.885187][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.885230][ C0] RIP: 0010:stack_access_ok+0x96/0x270 [ 164.885257][ C0] Code: 89 04 24 48 b8 00 00 00 00 00 fc ff df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 84 01 00 00 44 8b 3b 31 ff 44 89 fe e8 0a de 4e 00 <45> 85 ff 74 0e e8 c0 db 4e 00 4c 39 f5 0f 83 1b 01 00 00 e8 b2 db [ 164.885281][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00000246 [ 164.885300][ C0] RAX: 0000000000000000 RBX: ffffc90000007628 RCX: ffffffff813cfd16 [ 164.885317][ C0] RDX: ffff88801cebda00 RSI: 0000000000000000 RDI: 0000000000000005 [ 164.885333][ C0] RBP: ffffc900000d7a70 R08: 0000000000000005 R09: 0000000000000000 [ 164.885349][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000007630 [ 164.885366][ C0] R13: ffffc90000007638 R14: ffffc900000d0000 R15: 0000000000000001 [ 164.885388][ C0] ? stack_access_ok+0x96/0x270 [ 164.885422][ C0] unwind_next_frame+0xd9b/0x23a0 [ 164.885450][ C0] ? kasan_save_stack+0x33/0x60 [ 164.885492][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.885527][ C0] arch_stack_walk+0x100/0x170 [ 164.885559][ C0] ? kasan_save_stack+0x33/0x60 [ 164.885602][ C0] stack_trace_save+0x95/0xd0 [ 164.885652][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 164.885687][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 164.885721][ C0] ? __pfx_mark_lock+0x10/0x10 [ 164.885757][ C0] ? hlock_class+0x4e/0x130 [ 164.885786][ C0] ? mark_lock+0xb5/0xc60 [ 164.885828][ C0] kasan_save_stack+0x33/0x60 [ 164.885867][ C0] ? kasan_save_stack+0x33/0x60 [ 164.885905][ C0] ? kasan_save_track+0x14/0x30 [ 164.885944][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 164.885967][ C0] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 164.886009][ C0] ? __alloc_skb+0x2b1/0x380 [ 164.886041][ C0] ? skb_copy+0x1c9/0x3a0 [ 164.886075][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 164.886118][ C0] ? mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 164.886159][ C0] ? mac80211_hwsim_beacon_tx+0x592/0xa00 [ 164.886199][ C0] ? __iterate_interfaces+0x2d0/0x5d0 [ 164.886236][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 164.886281][ C0] ? mac80211_hwsim_beacon+0x105/0x200 [ 164.886313][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 164.886340][ C0] ? hrtimer_run_softirq+0x17d/0x350 [ 164.886367][ C0] ? handle_softirqs+0x216/0x8f0 [ 164.886394][ C0] ? irq_exit_rcu+0xbb/0x120 [ 164.886422][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 164.886461][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.886503][ C0] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 164.886530][ C0] ? arch_stack_walk+0xce/0x170 [ 164.886557][ C0] ? stack_trace_save+0x95/0xd0 [ 164.886588][ C0] ? kasan_save_stack+0x33/0x60 [ 164.886648][ C0] kasan_save_track+0x14/0x30 [ 164.886688][ C0] __kasan_slab_alloc+0x89/0x90 [ 164.886714][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 164.886757][ C0] ? __alloc_skb+0x2b1/0x380 [ 164.886795][ C0] __alloc_skb+0x2b1/0x380 [ 164.886835][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 164.886868][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 164.886906][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.886948][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 164.886979][ C0] skb_copy+0x1c9/0x3a0 [ 164.887017][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 164.887068][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 164.887112][ C0] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 164.887149][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.887189][ C0] ? read_tsc+0x9/0x20 [ 164.887235][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 164.887277][ C0] ? mac80211_hwsim_monitor_rx+0x1cd/0x850 [ 164.887316][ C0] mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 164.887361][ C0] mac80211_hwsim_beacon_tx+0x592/0xa00 [ 164.887406][ C0] ? find_held_lock+0x2d/0x110 [ 164.887439][ C0] __iterate_interfaces+0x2d0/0x5d0 [ 164.887479][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 164.887523][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 164.887565][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 164.887598][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 164.887646][ C0] mac80211_hwsim_beacon+0x105/0x200 [ 164.887681][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 164.887717][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 164.887747][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 164.887792][ C0] hrtimer_run_softirq+0x17d/0x350 [ 164.887829][ C0] handle_softirqs+0x216/0x8f0 [ 164.887861][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 164.887895][ C0] irq_exit_rcu+0xbb/0x120 [ 164.887923][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 164.887964][ C0] [ 164.887971][ C0] [ 164.887980][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.888022][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 164.888051][ C0] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd [ 164.888076][ C0] RSP: 0018:ffffc900000d7718 EFLAGS: 00000246 [ 164.888094][ C0] RAX: ffffffff8100509a RBX: ffffffff8100509a RCX: ffffffff813cf8b7 [ 164.888112][ C0] RDX: ffff88801cebda00 RSI: ffffffff8100509a RDI: 0000000000000000 [ 164.888129][ C0] RBP: ffffc900000d77b8 R08: 0000000000000005 R09: 0000000000000000 [ 164.888146][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900000d7728 [ 164.888162][ C0] R13: ffffffff817774c0 R14: ffffc900000d77e8 R15: ffff88801cebda00 [ 164.888181][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.888216][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 164.888256][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 164.888293][ C0] ? unwind_get_return_address+0x87/0xe0 [ 164.888320][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 164.888361][ C0] arch_stack_walk+0xce/0x170 [ 164.888400][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 164.888449][ C0] stack_trace_save+0x95/0xd0 [ 164.888489][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 164.888532][ C0] ? __pfx_mark_lock+0x10/0x10 [ 164.888580][ C0] kasan_save_stack+0x33/0x60 [ 164.888627][ C0] ? kasan_save_stack+0x33/0x60 [ 164.888671][ C0] ? kasan_save_track+0x14/0x30 [ 164.888717][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 164.888759][ C0] ? __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 164.888791][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 164.888827][ C0] ? __alloc_skb+0x164/0x380 [ 164.888865][ C0] ? nsim_dev_trap_report_work+0x2a4/0xc80 [ 164.888907][ C0] ? process_one_work+0x9c5/0x1b40 [ 164.888934][ C0] ? worker_thread+0x6c8/0xf00 [ 164.888962][ C0] ? kthread+0x2c1/0x3a0 [ 164.888996][ C0] ? ret_from_fork+0x45/0x80 [ 164.889067][ C0] kasan_save_track+0x14/0x30 [ 164.889108][ C0] __kasan_kmalloc+0xaa/0xb0 [ 164.889149][ C0] __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 164.889178][ C0] ? __alloc_skb+0x164/0x380 [ 164.889215][ C0] kmalloc_reserve+0xef/0x2c0 [ 164.889240][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 164.889282][ C0] __alloc_skb+0x164/0x380 [ 164.889316][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 164.889350][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 164.889382][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 164.889414][ C0] nsim_dev_trap_report_work+0x2a4/0xc80 [ 164.889461][ C0] process_one_work+0x9c5/0x1b40 [ 164.889493][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 164.889532][ C0] ? __pfx_process_one_work+0x10/0x10 [ 164.889580][ C0] ? assign_work+0x1a0/0x250 [ 164.889621][ C0] worker_thread+0x6c8/0xf00 [ 164.889654][ C0] ? __pfx_worker_thread+0x10/0x10 [ 164.889679][ C0] kthread+0x2c1/0x3a0 [ 164.889708][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.889746][ C0] ? __pfx_kthread+0x10/0x10 [ 164.889777][ C0] ret_from_fork+0x45/0x80 [ 164.889821][ C0] ? __pfx_kthread+0x10/0x10 [ 164.889852][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.889899][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.223809][ T5287] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive