last executing test programs: 26.823229011s ago: executing program 2 (id=332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180200"/13], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000005800)=ANY=[], 0x0) 26.749982528s ago: executing program 2 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) 26.634748517s ago: executing program 2 (id=335): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r3, @ANYBLOB="da"], 0x20}}, 0x0) 26.161260286s ago: executing program 1 (id=337): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) io_getevents(0x0, 0x5, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0xffffffffffffc117, &(0x7f0000000140), 0x14) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 26.142460384s ago: executing program 2 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 26.015652031s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0) 25.891209821s ago: executing program 2 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x20, 0x80}, {0x1000000003ff, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x7, 0x78}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 24.161841164s ago: executing program 1 (id=349): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r3, @ANYBLOB="da"], 0x20}}, 0x0) 24.096587428s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 24.052907397s ago: executing program 1 (id=351): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) readv(r0, 0x0, 0x0) 23.958286978s ago: executing program 1 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0) 23.943702369s ago: executing program 1 (id=353): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000140)=0x7fd, 0x12) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xac, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a2b29c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000100)={0x0, r7}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) 10.063601901s ago: executing program 32 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x20, 0x80}, {0x1000000003ff, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x7, 0x78}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 7.904088s ago: executing program 33 (id=353): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000140)=0x7fd, 0x12) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xac, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a2b29c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000100)={0x0, r7}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) 3.043182068s ago: executing program 0 (id=465): ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000480)='!.\x00', 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c0004801c0001800a00010071756575650000000c00028006000140040000002c0001800a0001"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.864132051s ago: executing program 4 (id=468): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, 0x0) 1.817125133s ago: executing program 0 (id=469): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 1.68312688s ago: executing program 4 (id=470): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000080)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0, 0x0, 0x6, 0x0, 0x1, r2}]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 1.559306241s ago: executing program 3 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.527511445s ago: executing program 4 (id=472): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0x4) 1.435783964s ago: executing program 4 (id=473): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'dummy0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e001200280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00080306000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500"], 0xb4}}, 0x0) 1.435013033s ago: executing program 3 (id=474): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x4028700f, 0xffffffffffffffff) 1.239301298s ago: executing program 3 (id=475): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 1.169849656s ago: executing program 4 (id=476): socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = fanotify_init(0x8, 0x40000) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r6, 0x1, 0x8100011, r7, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x8000}}, './file0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 1.047122432s ago: executing program 3 (id=477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x44840) 861.065485ms ago: executing program 0 (id=478): socket(0x10, 0x80002, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x800000000000000, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 551.737789ms ago: executing program 3 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x40) 313.463918ms ago: executing program 3 (id=480): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$isdn_base(0x22, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) io_uring_setup(0x30d3, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 274.944738ms ago: executing program 0 (id=481): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1010000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28040085) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @multicast}}, 0x1e) 94.025227ms ago: executing program 0 (id=482): syz_emit_vhci(&(0x7f0000000e00)=ANY=[@ANYBLOB="040e0b080d"], 0xd) 70.717671ms ago: executing program 4 (id=483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r1, 0x1) 0s ago: executing program 0 (id=484): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 54.037515][ T30] audit: type=1400 audit(1744326930.452:88): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.040897][ T5810] cgroup: Unknown subsys name 'net' [ 54.060732][ T30] audit: type=1400 audit(1744326930.452:89): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.088549][ T30] audit: type=1400 audit(1744326930.492:90): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.225193][ T5810] cgroup: Unknown subsys name 'cpuset' [ 54.233466][ T5810] cgroup: Unknown subsys name 'rlimit' [ 54.356355][ T30] audit: type=1400 audit(1744326930.772:91): avc: denied { setattr } for pid=5810 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.379786][ T30] audit: type=1400 audit(1744326930.772:92): avc: denied { create } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.410813][ T30] audit: type=1400 audit(1744326930.772:93): avc: denied { write } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.431240][ T30] audit: type=1400 audit(1744326930.772:94): avc: denied { read } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.452481][ T30] audit: type=1400 audit(1744326930.802:95): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 54.477461][ T30] audit: type=1400 audit(1744326930.802:96): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.501025][ T30] audit: type=1400 audit(1744326930.812:97): avc: denied { read } for pid=5492 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 54.533621][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.396492][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.465375][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.473535][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.481111][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.488743][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.496821][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.504595][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.512270][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.516064][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.519625][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.537504][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.538823][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.551706][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.559641][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.560705][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.566787][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.582701][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.590735][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.592011][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.606175][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.610505][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.613894][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.627499][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.635755][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.643217][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.651102][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.041867][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 58.095461][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 58.136226][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 58.215831][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 58.292893][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 58.333745][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.341187][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.348561][ T5821] bridge_slave_0: entered allmulticast mode [ 58.355363][ T5821] bridge_slave_0: entered promiscuous mode [ 58.363869][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.370948][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.378655][ T5821] bridge_slave_1: entered allmulticast mode [ 58.385601][ T5821] bridge_slave_1: entered promiscuous mode [ 58.449975][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.457346][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.464560][ T5832] bridge_slave_0: entered allmulticast mode [ 58.471183][ T5832] bridge_slave_0: entered promiscuous mode [ 58.480751][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.514442][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.521572][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.529038][ T5832] bridge_slave_1: entered allmulticast mode [ 58.536291][ T5832] bridge_slave_1: entered promiscuous mode [ 58.553794][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.578794][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.586515][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.594145][ T5820] bridge_slave_0: entered allmulticast mode [ 58.600827][ T5820] bridge_slave_0: entered promiscuous mode [ 58.616206][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.623467][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.630584][ T5822] bridge_slave_0: entered allmulticast mode [ 58.637457][ T5822] bridge_slave_0: entered promiscuous mode [ 58.645011][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.652052][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.659403][ T5822] bridge_slave_1: entered allmulticast mode [ 58.666313][ T5822] bridge_slave_1: entered promiscuous mode [ 58.687295][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.694478][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.701569][ T5820] bridge_slave_1: entered allmulticast mode [ 58.708399][ T5820] bridge_slave_1: entered promiscuous mode [ 58.714889][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.721953][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.729888][ T5823] bridge_slave_0: entered allmulticast mode [ 58.736803][ T5823] bridge_slave_0: entered promiscuous mode [ 58.752938][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.764112][ T5821] team0: Port device team_slave_0 added [ 58.772097][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.787731][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.794879][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.801980][ T5823] bridge_slave_1: entered allmulticast mode [ 58.808881][ T5823] bridge_slave_1: entered promiscuous mode [ 58.823423][ T5821] team0: Port device team_slave_1 added [ 58.831066][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.873165][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.891648][ T5832] team0: Port device team_slave_0 added [ 58.899734][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.911221][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.938183][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.945268][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.971602][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.999593][ T5832] team0: Port device team_slave_1 added [ 59.021443][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.033669][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.046808][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.054661][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.080749][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.093789][ T5822] team0: Port device team_slave_0 added [ 59.113335][ T5820] team0: Port device team_slave_0 added [ 59.145231][ T5822] team0: Port device team_slave_1 added [ 59.153747][ T5820] team0: Port device team_slave_1 added [ 59.159756][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.166838][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.193435][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.206066][ T5823] team0: Port device team_slave_0 added [ 59.233596][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.240542][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.266653][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.278637][ T5823] team0: Port device team_slave_1 added [ 59.300150][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.307275][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.333405][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.345608][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.352626][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.378787][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.419536][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.426580][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.452500][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.464477][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.471409][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.497338][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.509608][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.517093][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.543180][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.557354][ T5821] hsr_slave_0: entered promiscuous mode [ 59.564320][ T5821] hsr_slave_1: entered promiscuous mode [ 59.577978][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.585347][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.611297][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.673435][ T5835] Bluetooth: hci2: command tx timeout [ 59.679159][ T5835] Bluetooth: hci0: command tx timeout [ 59.681042][ T5830] Bluetooth: hci4: command tx timeout [ 59.684815][ T5839] Bluetooth: hci1: command tx timeout [ 59.700624][ T5832] hsr_slave_0: entered promiscuous mode [ 59.707689][ T5832] hsr_slave_1: entered promiscuous mode [ 59.713701][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.721888][ T5832] Cannot create hsr debugfs directory [ 59.737494][ T5822] hsr_slave_0: entered promiscuous mode [ 59.744366][ T5822] hsr_slave_1: entered promiscuous mode [ 59.750232][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.757934][ T5822] Cannot create hsr debugfs directory [ 59.762704][ T5830] Bluetooth: hci3: command tx timeout [ 59.785584][ T5820] hsr_slave_0: entered promiscuous mode [ 59.791587][ T5820] hsr_slave_1: entered promiscuous mode [ 59.797790][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.805365][ T5820] Cannot create hsr debugfs directory [ 59.867030][ T5823] hsr_slave_0: entered promiscuous mode [ 59.873482][ T5823] hsr_slave_1: entered promiscuous mode [ 59.879360][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.886948][ T5823] Cannot create hsr debugfs directory [ 60.180426][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.196254][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.208280][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.225138][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.265605][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.278990][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.296268][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.316220][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.393678][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.416152][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.429757][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.437496][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.459120][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.499391][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.518402][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.535932][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.567333][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.574521][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.582846][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.607954][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.615057][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.623907][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.652108][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.668086][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.682099][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.705740][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.717307][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.728292][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.746859][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.753963][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.790385][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.797504][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.857668][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 60.857682][ T30] audit: type=1400 audit(1744326937.272:111): avc: denied { sys_module } for pid=5832 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.947379][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.011752][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.029836][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.064266][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.078594][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.097591][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.104729][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.122130][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.137021][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.148119][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.164928][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.172012][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.185133][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.192248][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.224315][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.231381][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.262324][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.269417][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.280174][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.287267][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.331462][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.348371][ T5832] veth0_vlan: entered promiscuous mode [ 61.398896][ T5832] veth1_vlan: entered promiscuous mode [ 61.485788][ T5832] veth0_macvtap: entered promiscuous mode [ 61.506160][ T5832] veth1_macvtap: entered promiscuous mode [ 61.561342][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.601834][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.621162][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.631748][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.643905][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.654313][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.754493][ T5830] Bluetooth: hci4: command tx timeout [ 61.764433][ T5830] Bluetooth: hci0: command tx timeout [ 61.770244][ T5830] Bluetooth: hci1: command tx timeout [ 61.775958][ T5830] Bluetooth: hci2: command tx timeout [ 61.783130][ T5821] veth0_vlan: entered promiscuous mode [ 61.831721][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.844939][ T5836] Bluetooth: hci3: command tx timeout [ 61.859147][ T5821] veth1_vlan: entered promiscuous mode [ 61.890372][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.904555][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.944528][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.961015][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.006235][ T5821] veth0_macvtap: entered promiscuous mode [ 62.028680][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.037594][ T5821] veth1_macvtap: entered promiscuous mode [ 62.038030][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.056281][ T5822] veth0_vlan: entered promiscuous mode [ 62.063278][ T5823] veth0_vlan: entered promiscuous mode [ 62.079545][ T30] audit: type=1400 audit(1744326938.492:112): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/root/syzkaller.B6dkNc/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.084067][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.121657][ T30] audit: type=1400 audit(1744326938.492:113): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.127560][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.147210][ T30] audit: type=1400 audit(1744326938.492:114): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/root/syzkaller.B6dkNc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.159644][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.180299][ T30] audit: type=1400 audit(1744326938.542:115): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.215243][ T5822] veth1_vlan: entered promiscuous mode [ 62.227543][ T5823] veth1_vlan: entered promiscuous mode [ 62.249629][ T5820] veth0_vlan: entered promiscuous mode [ 62.256139][ T30] audit: type=1400 audit(1744326938.542:116): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/root/syzkaller.B6dkNc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.273732][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.294856][ T30] audit: type=1400 audit(1744326938.542:117): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/root/syzkaller.B6dkNc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.328467][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.339766][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.347988][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.376036][ T30] audit: type=1400 audit(1744326938.542:118): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.413432][ T5820] veth1_vlan: entered promiscuous mode [ 62.423624][ T30] audit: type=1400 audit(1744326938.572:119): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.426667][ T5822] veth0_macvtap: entered promiscuous mode [ 62.454892][ T30] audit: type=1400 audit(1744326938.572:120): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="gadgetfs" ino=7170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.521286][ T5820] veth0_macvtap: entered promiscuous mode [ 62.532216][ T5820] veth1_macvtap: entered promiscuous mode [ 62.551435][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.568183][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.580175][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.594210][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.609464][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.618378][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.627903][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.637421][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.646778][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.661742][ T5822] veth1_macvtap: entered promiscuous mode [ 62.670089][ T5823] veth0_macvtap: entered promiscuous mode [ 63.106147][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.117292][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.127547][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.138850][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.153006][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.162729][ T5823] veth1_macvtap: entered promiscuous mode [ 63.186071][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.195548][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.204601][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213549][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.224959][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.236314][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.246468][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.257346][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.268049][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.279152][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.290339][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.383486][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.394845][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.404731][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.415196][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.425700][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.437016][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.450354][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.460828][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.476976][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.525518][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.537072][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.547218][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.558473][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.568386][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.579294][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.591691][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.600397][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.613292][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.623925][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.638071][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.648104][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.660735][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.672404][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.709771][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.721824][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.732284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.833590][ T5830] Bluetooth: hci1: command tx timeout [ 63.839308][ T5839] Bluetooth: hci4: command tx timeout [ 63.845160][ T5835] Bluetooth: hci0: command tx timeout [ 63.851507][ T5836] Bluetooth: hci2: command tx timeout [ 63.912990][ T5836] Bluetooth: hci3: command tx timeout [ 63.937086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.038683][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.054542][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.066745][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.077388][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.088632][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.097759][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.106882][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.115801][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.141181][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.152080][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.235576][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.257414][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.279130][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.292889][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.367327][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.390763][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.452581][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.460411][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.471969][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.514601][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.587858][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.596466][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.699307][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.744296][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.166146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.166475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.252818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.436325][ T5934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.600430][ T5939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 65.664333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.673105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 65.681997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 65.833281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.912998][ T5836] Bluetooth: hci2: command tx timeout [ 65.918512][ T5836] Bluetooth: hci4: command tx timeout [ 65.924034][ T5836] Bluetooth: hci0: command tx timeout [ 65.929487][ T5836] Bluetooth: hci1: command tx timeout [ 66.167255][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 66.167286][ T30] audit: type=1400 audit(1744326942.352:158): avc: denied { map_create } for pid=5944 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.192210][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.208980][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.251491][ T5836] Bluetooth: hci3: command tx timeout [ 66.284310][ T5939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 66.301342][ T30] audit: type=1400 audit(1744326942.352:159): avc: denied { map_read map_write } for pid=5944 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.323212][ T30] audit: type=1400 audit(1744326942.732:160): avc: denied { ioctl } for pid=5947 comm="syz.1.2" path="socket:[7104]" dev="sockfs" ino=7104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.323900][ T5951] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 66.348332][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.371146][ T30] audit: type=1400 audit(1744326942.782:161): avc: denied { read write } for pid=5952 comm="syz.2.17" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.394202][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.425192][ T5952] Process accounting resumed [ 66.445881][ T30] audit: type=1400 audit(1744326942.782:162): avc: denied { open } for pid=5952 comm="syz.2.17" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.493026][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 66.506340][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.518168][ T30] audit: type=1400 audit(1744326942.812:163): avc: denied { mounton } for pid=5952 comm="syz.2.17" path="/9/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.540782][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.557712][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.591986][ T30] audit: type=1400 audit(1744326942.902:164): avc: denied { create } for pid=5955 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.612845][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.623024][ T30] audit: type=1400 audit(1744326942.912:165): avc: denied { connect } for pid=5955 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.642378][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.052631][ T30] audit: type=1326 audit(1744326943.222:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226538d169 code=0x7ffc0000 [ 67.138667][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.146460][ T9] usb 4-1: invalid MIDI out EP 0 [ 67.173780][ T30] audit: type=1326 audit(1744326943.222:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226538d169 code=0x7ffc0000 [ 67.283181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.330302][ T5965] fuse: Bad value for 'fd' [ 68.265709][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 68.286224][ T9] usb 4-1: USB disconnect, device number 2 [ 68.562877][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.283712][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 69.739874][ T5992] Process accounting resumed [ 69.820910][ T5999] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 69.828838][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'. [ 69.985013][ T5999] team0: Port device geneve0 added [ 70.723344][ T6002] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 70.789396][ T6002] team0: Device veth1_macvtap failed to register rx_handler [ 70.961141][ T5999] syz.4.31 (5999) used greatest stack depth: 21320 bytes left [ 71.047753][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.055718][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.172645][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 71.172663][ T30] audit: type=1400 audit(1744326947.582:259): avc: denied { read } for pid=6012 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.521399][ T30] audit: type=1400 audit(1744326947.932:260): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.541348][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.999071][ T6013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.132901][ T30] audit: type=1400 audit(1744326948.542:261): avc: denied { ioctl } for pid=6019 comm="syz.3.38" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.158115][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.706177][ T30] audit: type=1400 audit(1744326950.122:262): avc: denied { mount } for pid=6034 comm="syz.2.43" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.397239][ T30] audit: type=1400 audit(1744326950.812:263): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.457893][ T6045] process 'syz.0.47' launched './file0' with NULL argv: empty string added [ 74.488942][ T30] audit: type=1400 audit(1744326950.862:264): avc: denied { execute } for pid=6044 comm="syz.0.47" name="file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.760140][ T30] audit: type=1400 audit(1744326950.882:265): avc: denied { execute_no_trans } for pid=6044 comm="syz.0.47" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.794256][ T30] audit: type=1400 audit(1744326950.882:266): avc: denied { create } for pid=6044 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.826609][ T30] audit: type=1400 audit(1744326950.892:267): avc: denied { read write } for pid=6044 comm="syz.0.47" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.997708][ T30] audit: type=1400 audit(1744326950.892:268): avc: denied { open } for pid=6044 comm="syz.0.47" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.015748][ T6067] Zero length message leads to an empty skb [ 76.515539][ T6070] overlayfs: failed to resolve './file0': -2 [ 76.553396][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 76.553410][ T30] audit: type=1400 audit(1744326952.562:279): avc: denied { write } for pid=6059 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.582179][ T5090] cfg80211: failed to load regulatory.db [ 76.828707][ T6071] Bluetooth: MGMT ver 1.23 [ 76.899838][ T30] audit: type=1400 audit(1744326953.222:280): avc: denied { bind } for pid=6065 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.638356][ T30] audit: type=1400 audit(1744326955.052:281): avc: denied { create } for pid=6083 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.906089][ T5839] Bluetooth: hci0: command tx timeout [ 79.499977][ T30] audit: type=1400 audit(1744326955.082:282): avc: denied { connect } for pid=6083 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.850795][ T30] audit: type=1400 audit(1744326956.262:283): avc: denied { read write } for pid=6101 comm="syz.4.64" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.905517][ T30] audit: type=1400 audit(1744326956.292:284): avc: denied { open } for pid=6101 comm="syz.4.64" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.935194][ T30] audit: type=1400 audit(1744326956.312:285): avc: denied { mounton } for pid=6090 comm="syz.3.61" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.962866][ T30] audit: type=1400 audit(1744326956.322:286): avc: denied { map } for pid=6101 comm="syz.4.64" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.988944][ T30] audit: type=1400 audit(1744326956.342:287): avc: denied { bind } for pid=6098 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.121476][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.128387][ T30] audit: type=1400 audit(1744326956.482:288): avc: denied { connect } for pid=6097 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.447986][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 80.456988][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 82.261022][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 82.261038][ T30] audit: type=1400 audit(1744326957.872:292): avc: denied { create } for pid=6116 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.336343][ T30] audit: type=1400 audit(1744326957.872:293): avc: denied { connect } for pid=6116 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.674026][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.680733][ T30] audit: type=1400 audit(1744326957.872:294): avc: denied { shutdown } for pid=6116 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.793343][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 83.968666][ T6143] input: syz1 as /devices/virtual/input/input5 [ 84.239785][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 84.317805][ T5902] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.706106][ T30] audit: type=1400 audit(1744326958.842:295): avc: denied { write } for pid=6127 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.727577][ T30] audit: type=1400 audit(1744326960.352:296): avc: denied { read write } for pid=6138 comm="syz.4.75" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.750963][ T30] audit: type=1400 audit(1744326960.352:297): avc: denied { open } for pid=6138 comm="syz.4.75" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.933091][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.944569][ T30] audit: type=1400 audit(1744326960.362:298): avc: denied { ioctl } for pid=6138 comm="syz.4.75" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.983034][ T5902] usb 1-1: Product: syz [ 84.987225][ T5902] usb 1-1: Manufacturer: syz [ 85.000608][ T30] audit: type=1400 audit(1744326960.512:299): avc: denied { read } for pid=5183 comm="acpid" name="js0" dev="devtmpfs" ino=2738 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.015528][ T6151] syz.4.79 uses obsolete (PF_INET,SOCK_PACKET) [ 85.108494][ T30] audit: type=1400 audit(1744326960.512:300): avc: denied { open } for pid=5183 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2738 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.137290][ T5902] usb 1-1: SerialNumber: syz [ 85.149162][ T5902] usb 1-1: config 0 descriptor?? [ 85.163397][ T6130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.411762][ T6156] NILFS (nullb0): couldn't find nilfs on the device [ 85.669987][ T30] audit: type=1400 audit(1744326960.512:301): avc: denied { ioctl } for pid=5183 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2738 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.687244][ T5871] usb 1-1: USB disconnect, device number 2 [ 86.242644][ T6158] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002 [ 86.353419][ T5871] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.659857][ T6157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6157 comm=syz.3.80 [ 86.692541][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 86.752623][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.786438][ T5871] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 86.831045][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 86.856599][ T5871] usb 3-1: Manufacturer: syz [ 86.892497][ T5871] usb 3-1: SerialNumber: syz [ 86.921646][ T5871] usb 3-1: config 0 descriptor?? [ 86.951514][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 89.483578][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 89.532708][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 89.532740][ T30] audit: type=1400 audit(1744326965.672:316): avc: denied { name_bind } for pid=6219 comm="syz.3.95" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.226138][ T5183] bcm5974 3-1:0.0: could not read from device [ 90.274388][ T5183] bcm5974 3-1:0.0: could not read from device [ 90.311806][ T5183] bcm5974 3-1:0.0: could not read from device [ 90.323971][ T5871] usb 3-1: USB disconnect, device number 2 [ 91.314763][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 91.907983][ T30] audit: type=1400 audit(1744326968.322:317): avc: denied { connect } for pid=6250 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.976298][ T30] audit: type=1400 audit(1744326968.322:318): avc: denied { bind } for pid=6250 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.106200][ T6261] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.709951][ T30] audit: type=1400 audit(1744326969.122:319): avc: denied { write } for pid=6265 comm="syz.4.111" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.872138][ T30] audit: type=1400 audit(1744326969.152:320): avc: denied { open } for pid=6265 comm="syz.4.111" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.895372][ T30] audit: type=1400 audit(1744326969.192:321): avc: denied { ioctl } for pid=6265 comm="syz.4.111" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.072745][ T6273] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 93.080566][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 93.168053][ T6273] team0: Port device geneve0 added [ 93.832741][ T5902] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.960609][ T30] audit: type=1400 audit(1744326970.372:322): avc: denied { bind } for pid=6284 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.003344][ T30] audit: type=1400 audit(1744326970.372:323): avc: denied { name_bind } for pid=6284 comm="syz.3.120" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 94.023937][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.041450][ T30] audit: type=1400 audit(1744326970.372:324): avc: denied { node_bind } for pid=6284 comm="syz.3.120" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 94.062633][ T5902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.062659][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.062675][ T5902] usb 1-1: Product: syz [ 94.062686][ T5902] usb 1-1: Manufacturer: syz [ 94.062698][ T5902] usb 1-1: SerialNumber: syz [ 94.087562][ T6289] input: syz0 as /devices/virtual/input/input8 [ 94.091845][ T30] audit: type=1400 audit(1744326970.392:325): avc: denied { listen } for pid=6284 comm="syz.3.120" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.100227][ T5902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.179017][ T5872] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.397043][ T6276] random: crng reseeded on system resumption [ 94.453592][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.492930][ T5874] usb 1-1: USB disconnect, device number 3 [ 94.622596][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 94.630063][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.644441][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.654211][ T5873] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 94.664196][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.673764][ T5873] usb 5-1: config 0 descriptor?? [ 95.171824][ T5871] IPVS: starting estimator thread 0... [ 95.172840][ T5873] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 95.179833][ T6308] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 95.200173][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.202588][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 95.293315][ T6309] IPVS: using max 44 ests per chain, 105600 per kthread [ 95.695392][ T5872] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 95.703305][ T5873] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: d8. [ 95.733484][ T5872] ath9k_htc: Failed to initialize the device [ 95.740850][ T5874] usb 1-1: ath9k_htc: USB layer deinitialized [ 95.744190][ T5873] usb 5-1: USB disconnect, device number 2 [ 95.835183][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 95.835198][ T30] audit: type=1400 audit(1744326972.252:333): avc: denied { name_connect } for pid=6317 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 95.961024][ T6321] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 96.002189][ T6321] netlink: 228 bytes leftover after parsing attributes in process `syz.2.131'. [ 96.105115][ T30] audit: type=1400 audit(1744326972.522:334): avc: denied { ioctl } for pid=6317 comm="syz.2.131" path="socket:[8718]" dev="sockfs" ino=8718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.194414][ T30] audit: type=1400 audit(1744326972.612:335): avc: denied { read } for pid=6334 comm="syz.0.138" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.258257][ T30] audit: type=1400 audit(1744326972.612:336): avc: denied { open } for pid=6334 comm="syz.0.138" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.282013][ T5873] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.300345][ T30] audit: type=1400 audit(1744326972.632:337): avc: denied { ioctl } for pid=6334 comm="syz.0.138" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.329423][ T30] audit: type=1400 audit(1744326972.742:338): avc: denied { read } for pid=6339 comm="syz.3.140" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.406238][ T6342] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 96.429477][ T30] audit: type=1400 audit(1744326972.842:339): avc: denied { write } for pid=6334 comm="syz.0.138" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.485772][ T5873] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.497924][ T5873] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.512947][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.522105][ T30] audit: type=1400 audit(1744326972.922:340): avc: denied { read write } for pid=6344 comm="syz.3.142" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.543135][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.554249][ T30] audit: type=1400 audit(1744326972.922:341): avc: denied { open } for pid=6344 comm="syz.3.142" path="/23/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.583133][ T6325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.606541][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.751305][ T6349] tipc: Can't bind to reserved service type 2 [ 96.758595][ T30] audit: type=1400 audit(1744326973.162:342): avc: denied { bind } for pid=6348 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.223519][ T5872] usb 2-1: USB disconnect, device number 2 [ 98.792109][ T6392] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 98.909455][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 99.637373][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 100.267154][ T6421] netlink: 'syz.4.173': attribute type 12 has an invalid length. [ 100.360863][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.403726][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.485123][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.555043][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.592232][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.666504][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.686593][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 101.829199][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 101.829212][ T30] audit: type=1400 audit(1744326978.042:353): avc: denied { write } for pid=6435 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.854592][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.148415][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.217643][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.267648][ T10] usb 2-1: Product: syz [ 102.275134][ T10] usb 2-1: Manufacturer: syz [ 102.285920][ T10] usb 2-1: SerialNumber: syz [ 102.311577][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.328678][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.573916][ T6422] random: crng reseeded on system resumption [ 102.754265][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.145569][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.172498][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.184472][ T10] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 103.202681][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.242206][ T10] usb 3-1: config 0 descriptor?? [ 103.288246][ T5874] usb 2-1: USB disconnect, device number 3 [ 103.319342][ T30] audit: type=1400 audit(1744326979.722:354): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.339061][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.362462][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 103.369593][ T9] ath9k_htc: Failed to initialize the device [ 103.378795][ T6471] 8021q: VLANs not supported on wg2 [ 103.557485][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.585584][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.610177][ T6455] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.644395][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 103.675418][ T5874] usb 2-1: ath9k_htc: USB layer deinitialized [ 103.682532][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.690039][ T6455] dummy0: entered promiscuous mode [ 103.697549][ T6455] macvtap1: entered promiscuous mode [ 103.708524][ T6455] macvtap1: entered allmulticast mode [ 103.717939][ T6455] dummy0: entered allmulticast mode [ 103.743855][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 103.751145][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.763928][ T10] usb 3-1: USB disconnect, device number 3 [ 103.854397][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 103.871895][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.906720][ T5827] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 103.932471][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 103.962661][ T5827] usb 1-1: Manufacturer: syz [ 103.967273][ T5827] usb 1-1: SerialNumber: syz [ 104.015054][ T5827] usb 1-1: config 0 descriptor?? [ 104.030243][ T5827] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 104.450112][ T6473] input: syz0 as /devices/virtual/input/input10 [ 104.470894][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 104.659435][ T30] audit: type=1400 audit(1744326980.692:355): avc: denied { write } for pid=6479 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.689891][ T30] audit: type=1400 audit(1744326980.702:356): avc: denied { create } for pid=6482 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.713474][ T30] audit: type=1400 audit(1744326980.712:357): avc: denied { bind } for pid=6482 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.750312][ T30] audit: type=1400 audit(1744326980.722:358): avc: denied { listen } for pid=6482 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.822114][ T30] audit: type=1400 audit(1744326980.732:359): avc: denied { accept } for pid=6482 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.017553][ T6501] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 105.025498][ T6501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 105.803645][ T30] audit: type=1400 audit(1744326982.222:360): avc: denied { ioctl } for pid=6503 comm="syz.3.202" path="socket:[9167]" dev="sockfs" ino=9167 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.432596][ T5183] bcm5974 1-1:0.0: could not read from device [ 106.525074][ T5183] bcm5974 1-1:0.0: could not read from device [ 106.558523][ T5827] usb 1-1: USB disconnect, device number 4 [ 106.566581][ T5183] bcm5974 1-1:0.0: could not read from device [ 106.613053][ T5183] bcm5974 1-1:0.0: could not read from device [ 107.112862][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 107.208530][ T30] audit: type=1400 audit(1744326983.612:361): avc: denied { write } for pid=6529 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.534276][ T30] audit: type=1400 audit(1744326984.922:362): avc: denied { create } for pid=6545 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.553883][ T5827] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.872627][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 108.887019][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.910500][ T5827] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 108.930344][ T6559] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 108.950993][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.222'. [ 109.023083][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 109.212998][ T5827] usb 2-1: Manufacturer: syz [ 109.273976][ T5827] usb 2-1: SerialNumber: syz [ 109.308142][ T30] audit: type=1400 audit(1744326984.942:363): avc: denied { ioctl } for pid=6545 comm="syz.4.220" path="socket:[10272]" dev="sockfs" ino=10272 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.343047][ T5827] usb 2-1: config 0 descriptor?? [ 109.398046][ T5827] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 109.420824][ T6567] Bluetooth: MGMT ver 1.23 [ 109.546318][ T30] audit: type=1400 audit(1744326985.962:364): avc: denied { accept } for pid=6570 comm="syz.0.228" lport=45484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.613715][ T6548] input: syz0 as /devices/virtual/input/input12 [ 110.586525][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 111.113218][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.605628][ T30] audit: type=1400 audit(1744326987.612:365): avc: denied { setopt } for pid=6588 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 111.670440][ T5183] bcm5974 2-1:0.0: could not read from device [ 111.724441][ T5827] usb 2-1: USB disconnect, device number 4 [ 112.796169][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'. [ 113.385649][ T30] audit: type=1400 audit(1744326989.762:366): avc: denied { mount } for pid=6619 comm="syz.2.245" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 113.611856][ T6627] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 113.619823][ T6627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'. [ 113.987237][ T30] audit: type=1400 audit(1744326990.402:367): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 114.181470][ T6627] team0: Port device geneve0 added [ 114.217650][ T5839] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 114.262570][ T5827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.396764][ T30] audit: type=1400 audit(1744326990.732:368): avc: denied { sqpoll } for pid=6629 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.243047][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 115.251217][ T30] audit: type=1400 audit(1744326990.752:369): avc: denied { bind } for pid=6629 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.275250][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.392918][ T5827] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 115.401980][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 115.411551][ T5827] usb 1-1: Manufacturer: syz [ 115.418076][ T5827] usb 1-1: SerialNumber: syz [ 115.438863][ T5827] usb 1-1: config 0 descriptor?? [ 115.458093][ T5827] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 115.562866][ T30] audit: type=1400 audit(1744326991.972:370): avc: denied { search } for pid=5492 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.640826][ T30] audit: type=1400 audit(1744326992.002:371): avc: denied { read } for pid=5492 comm="dhcpcd" name="n100" dev="tmpfs" ino=2697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.686838][ T30] audit: type=1400 audit(1744326992.002:372): avc: denied { open } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.722876][ T6630] input: syz0 as /devices/virtual/input/input14 [ 115.740778][ T30] audit: type=1400 audit(1744326992.002:373): avc: denied { getattr } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.765214][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 115.769895][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.900687][ T30] audit: type=1400 audit(1744326992.312:374): avc: denied { create } for pid=6655 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.962529][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.971727][ T30] audit: type=1400 audit(1744326992.352:375): avc: denied { read } for pid=6655 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.253051][ T5873] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 116.279291][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.302722][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.359768][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.373915][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.398685][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.446416][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.460767][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.472328][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.483895][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.491977][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.501692][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.513055][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.521201][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.531773][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.545019][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.554748][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.564368][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.577900][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.590269][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.601451][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.617155][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.626013][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.646991][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.685725][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 116.770540][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.785160][ T5873] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.795022][ T5873] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.804366][ T5873] usb 3-1: Product: syz [ 116.808755][ T5873] usb 3-1: Manufacturer: syz [ 116.815583][ T5873] usb 3-1: SerialNumber: syz [ 116.852257][ T5873] usb 3-1: config 0 descriptor?? [ 116.887363][ T5873] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.961442][ T5183] bcm5974 1-1:0.0: could not read from device [ 117.020667][ T5183] bcm5974 1-1:0.0: could not read from device [ 117.034070][ T5827] usb 1-1: USB disconnect, device number 5 [ 117.270332][ T5873] usb 3-1: USB disconnect, device number 4 [ 117.300442][ T5873] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 117.575754][ T6654] Process accounting resumed [ 118.233961][ T5836] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 118.243454][ T5836] Bluetooth: hci4: Injecting HCI hardware error event [ 118.252162][ T5836] Bluetooth: hci4: hardware error 0x00 [ 118.450345][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 118.721931][ T6720] netlink: 'syz.4.273': attribute type 5 has an invalid length. [ 119.433791][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 119.433807][ T30] audit: type=1400 audit(1744326995.852:390): avc: denied { create } for pid=6732 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.922520][ T30] audit: type=1400 audit(1744326996.322:391): avc: denied { read } for pid=6729 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.992956][ T6734] infiniband syz0: set active [ 119.997785][ T6734] infiniband syz0: added bond0 [ 120.065670][ T6734] RDS/IB: syz0: added [ 120.070086][ T6734] smc: adding ib device syz0 with port count 1 [ 120.076604][ T6734] smc: ib device syz0 port 1 has pnetid [ 120.549335][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 120.895834][ T30] audit: type=1400 audit(1744326996.322:392): avc: denied { ioctl } for pid=6732 comm="syz.4.276" path="socket:[10496]" dev="sockfs" ino=10496 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.987614][ T30] audit: type=1400 audit(1744326997.362:393): avc: denied { connect } for pid=6743 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.012611][ T6742] netlink: 576 bytes leftover after parsing attributes in process `syz.2.278'. [ 121.363179][ T30] audit: type=1400 audit(1744326997.772:394): avc: denied { setopt } for pid=6743 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.301088][ T30] audit: type=1400 audit(1744326998.622:395): avc: denied { append } for pid=6758 comm="syz.1.284" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.770438][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 122.771090][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 123.599104][ T30] audit: type=1400 audit(1744327000.012:396): avc: denied { getopt } for pid=6783 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.175321][ T30] audit: type=1400 audit(1744327000.592:397): avc: denied { ioctl } for pid=6790 comm="syz.1.297" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.660925][ T6802] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 124.699480][ T6802] netlink: 228 bytes leftover after parsing attributes in process `syz.0.301'. [ 124.717292][ T30] audit: type=1400 audit(1744327001.132:398): avc: denied { write } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.786494][ T30] audit: type=1400 audit(1744327001.132:399): avc: denied { remove_name } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.237318][ T30] audit: type=1400 audit(1744327001.132:400): avc: denied { rename } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.266912][ T30] audit: type=1400 audit(1744327001.132:401): avc: denied { add_name } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.412647][ T30] audit: type=1400 audit(1744327001.132:402): avc: denied { unlink } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.436409][ T30] audit: type=1400 audit(1744327001.132:403): avc: denied { create } for pid=5180 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.088966][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.119564][ T6819] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.137740][ T30] audit: type=1400 audit(1744327002.552:404): avc: denied { create } for pid=6821 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 126.843560][ T30] audit: type=1400 audit(1744327003.262:405): avc: denied { mount } for pid=6841 comm="syz.4.319" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.420311][ T30] audit: type=1400 audit(1744327003.832:406): avc: denied { ioctl } for pid=6859 comm="syz.3.324" path="socket:[10690]" dev="sockfs" ino=10690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.440278][ T6862] netlink: 'syz.4.325': attribute type 12 has an invalid length. [ 128.153439][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 128.224400][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 128.694490][ T5827] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.872680][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 128.898355][ T5827] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 129.051643][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.105947][ T5827] usb 2-1: Product: syz [ 129.120505][ T5827] usb 2-1: Manufacturer: syz [ 129.126695][ T5827] usb 2-1: SerialNumber: syz [ 129.147223][ T5827] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 129.336114][ T5872] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 129.457176][ T30] audit: type=1400 audit(1744327005.852:407): avc: denied { ioctl } for pid=6904 comm="syz.4.344" path="socket:[10789]" dev="sockfs" ino=10789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.481729][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.707548][ T6886] random: crng reseeded on system resumption [ 129.835879][ T5871] usb 2-1: USB disconnect, device number 5 [ 130.397206][ T5872] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 130.408300][ T5872] ath9k_htc: Failed to initialize the device [ 130.424953][ T5871] usb 2-1: ath9k_htc: USB layer deinitialized [ 130.825699][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.834892][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.866485][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.876761][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.939357][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.950174][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 131.352638][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.359197][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 131.672655][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 131.672679][ T30] audit: type=1400 audit(1744327008.032:409): avc: denied { ioctl } for pid=6951 comm="syz.4.362" path="socket:[10869]" dev="sockfs" ino=10869 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.484054][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.516528][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.559646][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 133.570364][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 133.866843][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 133.877001][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 136.908001][ T7073] random: crng reseeded on system resumption [ 137.687342][ T7095] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 137.704031][ T10] IPVS: starting estimator thread 0... [ 137.712224][ T7095] __nla_validate_parse: 2 callbacks suppressed [ 137.712236][ T7095] netlink: 228 bytes leftover after parsing attributes in process `syz.4.399'. [ 137.980624][ T7100] IPVS: using max 45 ests per chain, 108000 per kthread [ 138.661238][ T7110] netlink: 'syz.3.402': attribute type 12 has an invalid length. [ 139.524993][ T7130] Process accounting resumed [ 141.453388][ T30] audit: type=1400 audit(1744327016.660:410): avc: denied { ioctl } for pid=7149 comm="syz.3.411" path="socket:[11602]" dev="sockfs" ino=11602 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.477854][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.279847][ T7163] Process accounting resumed [ 142.588907][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.601676][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.721545][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.731187][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.840292][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.854249][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 143.472229][ T3425] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 144.371695][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 144.940566][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.949270][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.961737][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.977579][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.989841][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.113673][ T6183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.152011][ T30] audit: type=1400 audit(1744327020.832:411): avc: denied { mounton } for pid=7222 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 145.262250][ T7229] No such timeout policy "syz1" [ 145.621716][ T6183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.873434][ T6183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.596503][ T7236] random: crng reseeded on system resumption [ 146.645228][ T6183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.276407][ T6183] bridge_slave_1: left allmulticast mode [ 147.293686][ T6183] bridge_slave_1: left promiscuous mode [ 147.300422][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.345571][ T5839] Bluetooth: hci4: command tx timeout [ 147.418071][ T6183] bridge_slave_0: left allmulticast mode [ 147.441424][ T6183] bridge_slave_0: left promiscuous mode [ 147.517250][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.583061][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.584150][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.598332][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.609827][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.617385][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.307024][ T6183] team0: Port device geneve0 removed [ 149.544560][ T30] audit: type=1400 audit(1744327024.948:412): avc: denied { ioctl } for pid=7288 comm="syz.0.457" path="socket:[11862]" dev="sockfs" ino=11862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.569303][ T5839] Bluetooth: hci4: command tx timeout [ 149.584327][ T65] smc: removing ib device syz0 [ 149.589650][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.612138][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.624240][ T6183] bond0 (unregistering): Released all slaves [ 149.836579][ T5839] Bluetooth: hci3: command tx timeout [ 151.273270][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 151.309011][ T7292] Process accounting resumed [ 151.553417][ T30] audit: type=1400 audit(1744327026.809:413): avc: denied { write } for pid=7324 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.792874][ T5839] Bluetooth: hci4: command tx timeout [ 152.049545][ T5839] Bluetooth: hci3: command tx timeout [ 152.480167][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 152.489122][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 152.579776][ T7251] chnl_net:caif_netlink_parms(): no params data found [ 152.586865][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 152.595820][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 152.648569][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 152.658066][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 152.666150][ T5836] Bluetooth: hci1: hardware error 0x00 [ 153.133829][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.149165][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.163066][ T7222] bridge_slave_0: entered allmulticast mode [ 153.171381][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 153.192344][ T7222] bridge_slave_0: entered promiscuous mode [ 153.291350][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.319620][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.359871][ T7222] bridge_slave_1: entered allmulticast mode [ 153.435892][ T7222] bridge_slave_1: entered promiscuous mode [ 153.837971][ T30] audit: type=1400 audit(1744327028.848:414): avc: denied { listen } for pid=7361 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.017407][ T5839] Bluetooth: hci4: command tx timeout [ 154.081289][ T30] audit: type=1400 audit(1744327028.923:415): avc: denied { accept } for pid=7361 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.114990][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.124227][ T30] audit: type=1400 audit(1744327028.942:416): avc: denied { read } for pid=7361 comm="syz.4.476" dev="sockfs" ino=12001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.172149][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.180044][ T3016] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 154.273226][ T5839] Bluetooth: hci3: command tx timeout [ 154.294129][ T7222] team0: Port device team_slave_0 added [ 154.309055][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.316282][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.323500][ T7251] bridge_slave_0: entered allmulticast mode [ 154.332087][ T7251] bridge_slave_0: entered promiscuous mode [ 154.344382][ T7378] bond0: entered promiscuous mode [ 154.354048][ T7378] bond_slave_0: entered promiscuous mode [ 154.360164][ T7378] bond_slave_1: entered promiscuous mode [ 154.427991][ T6183] hsr_slave_0: left promiscuous mode [ 154.454419][ T6183] hsr_slave_1: left promiscuous mode [ 154.463034][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.470829][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.490394][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.499424][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.518395][ T6183] [ 154.520736][ T6183] ============================================ [ 154.526876][ T6183] WARNING: possible recursive locking detected [ 154.533016][ T6183] 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 Not tainted [ 154.540100][ T6183] -------------------------------------------- [ 154.546221][ T6183] kworker/u8:10/6183 is trying to acquire lock: [ 154.552431][ T6183] ffff888064556d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0xa2/0x260 [ 154.562424][ T6183] [ 154.562424][ T6183] but task is already holding lock: [ 154.569762][ T6183] ffff888064556d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 154.581401][ T6183] and the lock comparison function returns 0: [ 154.587434][ T6183] [ 154.587434][ T6183] other info that might help us debug this: [ 154.595468][ T6183] Possible unsafe locking scenario: [ 154.595468][ T6183] [ 154.602888][ T6183] CPU0 [ 154.606140][ T6183] ---- [ 154.609391][ T6183] lock(&dev_instance_lock_key#3); [ 154.614567][ T6183] lock(&dev_instance_lock_key#3); [ 154.619745][ T6183] [ 154.619745][ T6183] *** DEADLOCK *** [ 154.619745][ T6183] [ 154.627861][ T6183] May be due to missing lock nesting notation [ 154.627861][ T6183] [ 154.636150][ T6183] 5 locks held by kworker/u8:10/6183: [ 154.641489][ T6183] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 154.651814][ T6183] #1: ffffc9000bfc7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 154.661703][ T6183] #2: ffffffff90115f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 154.670983][ T6183] #3: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 154.680970][ T6183] #4: ffff888064556d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 154.693052][ T6183] [ 154.693052][ T6183] stack backtrace: [ 154.698926][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: kworker/u8:10 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 154.698943][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.698952][ T6183] Workqueue: netns cleanup_net [ 154.698971][ T6183] Call Trace: [ 154.698978][ T6183] [ 154.698982][ T6183] dump_stack_lvl+0x116/0x1f0 [ 154.698999][ T6183] print_deadlock_bug+0x1e9/0x240 [ 154.699018][ T6183] __lock_acquire+0xff7/0x1ba0 [ 154.699032][ T6183] lock_acquire+0x179/0x350 [ 154.699042][ T6183] ? dev_set_allmulti+0xa2/0x260 [ 154.699058][ T6183] ? __pfx___might_resched+0x10/0x10 [ 154.699076][ T6183] __mutex_lock+0x199/0xb90 [ 154.699092][ T6183] ? dev_set_allmulti+0xa2/0x260 [ 154.699108][ T6183] ? __hw_addr_del_entry+0x106/0x390 [ 154.699124][ T6183] ? dev_set_allmulti+0xa2/0x260 [ 154.699151][ T6183] ? __pfx___mutex_lock+0x10/0x10 [ 154.699167][ T6183] ? lock_acquire+0xb4/0x350 [ 154.699184][ T6183] ? dev_set_allmulti+0xa2/0x260 [ 154.699199][ T6183] ? dev_mc_unsync+0x180/0x1d0 [ 154.699209][ T6183] dev_set_allmulti+0xa2/0x260 [ 154.699225][ T6183] macvlan_stop+0x362/0x4d0 [ 154.699240][ T6183] ? __pfx_macvlan_stop+0x10/0x10 [ 154.699254][ T6183] __dev_close_many+0x298/0x770 [ 154.699273][ T6183] ? __pfx___dev_close_many+0x10/0x10 [ 154.699290][ T6183] ? unregister_netdevice_many_notify+0x14a1/0x25a0 [ 154.699307][ T6183] dev_close_many+0x233/0x630 [ 154.699325][ T6183] ? __pfx_dev_close_many+0x10/0x10 [ 154.699344][ T6183] unregister_netdevice_many_notify+0x384/0x25a0 [ 154.699361][ T6183] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.699376][ T6183] ? batadv_tt_local_event+0x455/0x7f0 [ 154.699388][ T6183] ? __local_bh_enable_ip+0xa4/0x120 [ 154.699404][ T6183] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 154.699422][ T6183] ? unregister_netdevice_queue+0x22e/0x3f0 [ 154.699439][ T6183] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 154.699455][ T6183] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 154.699474][ T6183] default_device_exit_batch+0x853/0xaf0 [ 154.699491][ T6183] ? __pfx_default_device_exit_batch+0x10/0x10 [ 154.699507][ T6183] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 154.699521][ T6183] ? __pfx___might_resched+0x10/0x10 [ 154.699536][ T6183] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 154.699553][ T6183] ? __pfx_default_device_exit_batch+0x10/0x10 [ 154.699570][ T6183] ops_exit_list+0x128/0x180 [ 154.699584][ T6183] cleanup_net+0x5c1/0xb30 [ 154.699601][ T6183] ? __pfx_cleanup_net+0x10/0x10 [ 154.699617][ T6183] ? rcu_is_watching+0x12/0xc0 [ 154.699633][ T6183] process_one_work+0x9cc/0x1b70 [ 154.699650][ T6183] ? __pfx_process_one_work+0x10/0x10 [ 154.699665][ T6183] ? assign_work+0x1a0/0x250 [ 154.699677][ T6183] worker_thread+0x6c8/0xf10 [ 154.699692][ T6183] ? __kthread_parkme+0x19e/0x250 [ 154.699710][ T6183] ? __pfx_worker_thread+0x10/0x10 [ 154.699723][ T6183] kthread+0x3c2/0x780 [ 154.699735][ T6183] ? __pfx_kthread+0x10/0x10 [ 154.699745][ T6183] ? __pfx_kthread+0x10/0x10 [ 154.699756][ T6183] ? __pfx_kthread+0x10/0x10 [ 154.699766][ T6183] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.699777][ T6183] ? rcu_is_watching+0x12/0xc0 [ 154.699791][ T6183] ? __pfx_kthread+0x10/0x10 [ 154.699802][ T6183] ret_from_fork+0x45/0x80 [ 154.699814][ T6183] ? __pfx_kthread+0x10/0x10 [ 154.699826][ T6183] ret_from_fork_asm+0x1a/0x30 [ 154.699848][ T6183] [ 155.026360][ T5836] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 156.496713][ T5836] Bluetooth: hci3: command tx timeout