last executing test programs: 29.508013976s ago: executing program 0 (id=310): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020200000000000000012200000900030073797a320000000014000480080002400000000008000140000000070900010073797a31"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c854) 28.616119777s ago: executing program 0 (id=329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) io_setup(0x1, &(0x7f00000004c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r4, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r5, &(0x7f00000009c0)=']', 0x1, 0x0, 0x0, 0x0, r5}]) 27.134138143s ago: executing program 0 (id=332): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000a00)=""/4096}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c084) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x140) 25.964186336s ago: executing program 0 (id=336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x920421, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 25.204862389s ago: executing program 3 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x201, 0x0, 0x2000000, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) 25.197310071s ago: executing program 0 (id=339): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') dup3(r3, r0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 24.606618814s ago: executing program 0 (id=340): r0 = fanotify_init(0x4, 0x101000) r1 = open$dir(0x0, 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1019, r1, 0x0) fanotify_mark(r0, 0x1, 0x8001023, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r2, &(0x7f0000003680)=[{{&(0x7f0000000000)=@llc={0x1a, 0x207, 0x6, 0x10, 0xa, 0xf1, @broadcast}, 0x80, 0x0}}], 0x1, 0x8041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xc, 0x7cb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c9003cdba953e7ca38a158c9e326d52e05bac9f306ad278a61807cc99e8e88"], 0x40) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000180)={r11}) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r12, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) 24.055223105s ago: executing program 3 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 23.266503353s ago: executing program 3 (id=344): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) dup(0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 21.777684107s ago: executing program 3 (id=348): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x75dc, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) 20.907508291s ago: executing program 3 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000700)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 19.824734162s ago: executing program 3 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 11.570906039s ago: executing program 1 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 10.880495382s ago: executing program 1 (id=374): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x24) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) 7.93655682s ago: executing program 4 (id=380): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020200000000000000012200000900030073797a320000000014000480080002400000000008000140000000070900010073797a31"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c854) 7.105679223s ago: executing program 1 (id=381): socket(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x30e) r2 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x0, 0x2c1) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in=@local, 0x4e24, 0x0, 0x4e24, 0x4, 0xa, 0x0, 0x80}, {0x10, 0x1, 0x0, 0x1ee, 0xf, 0x9, 0x100000000, 0x8000000000000001}, {0x100, 0x4, 0x3ff, 0xb089}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x3507, 0x2, 0x3, 0xd0, 0x2, 0xffff, 0x1000}}, 0xe8) semctl$GETPID(r1, 0x1, 0xb, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 7.028969715s ago: executing program 4 (id=382): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c854) 5.804113426s ago: executing program 4 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000700)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 4.974479605s ago: executing program 2 (id=385): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00J'], 0x50) pipe2(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) socket$kcm(0x2, 0x0, 0x84) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.772938999s ago: executing program 4 (id=386): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_freezer_state(r1, 0x0, 0x0) 4.360777761s ago: executing program 4 (id=387): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 4.281875907s ago: executing program 2 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4000) 4.10867097s ago: executing program 2 (id=389): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6}, 0x10) sendto$packet(r2, &(0x7f0000000040)="02030007ffff", 0x6, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 3.971002291s ago: executing program 2 (id=390): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x140) sendfile(r2, r7, 0x0, 0x8000fbffc001) 3.895670792s ago: executing program 4 (id=391): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x24) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r5, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) 3.781870863s ago: executing program 1 (id=392): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.883921065s ago: executing program 2 (id=393): socket(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x30e) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) semget$private(0x0, 0x0, 0x2c1) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x48) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in=@local, 0x4e24, 0x0, 0x4e24, 0x4, 0xa, 0x0, 0x80}, {0x10, 0x1, 0x0, 0x1ee, 0xf, 0x9, 0x100000000, 0x8000000000000001}, {0x100, 0x4, 0x3ff, 0xb089}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x3507, 0x2, 0x3, 0xd0, 0x2, 0xffff, 0x1000}}, 0xe8) semctl$GETPID(r1, 0x1, 0xb, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.423348592s ago: executing program 1 (id=394): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000300)={0x2}) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {}, [], {0x10, 0x2}, {0x20, 0x6}}, 0x24, 0x1) setgroups(0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) socket$inet_mptcp(0x2, 0x1, 0x106) 421.685048ms ago: executing program 1 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='fsi_master_rw_result\x00'}, 0x18) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 0s ago: executing program 2 (id=396): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000016000004500000025", 0x1d}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xe}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): t } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.489770][ T30] audit: type=1400 audit(1748931752.018:71): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.331045][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.071514][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 63.071529][ T30] audit: type=1400 audit(1748931756.708:78): avc: denied { create } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.124097][ T30] audit: type=1400 audit(1748931756.738:79): avc: denied { read write } for pid=5813 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.152779][ T30] audit: type=1400 audit(1748931756.738:80): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.176894][ T30] audit: type=1400 audit(1748931756.748:81): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="socket:[4067]" dev="sockfs" ino=4067 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.235052][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.269172][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.273833][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.282427][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.289899][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.299063][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.302498][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.306488][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.314008][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.322055][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.328509][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.334716][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.341581][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.350162][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.355955][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.361863][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.368918][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.376162][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.384694][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.398126][ T30] audit: type=1400 audit(1748931757.028:82): avc: denied { read } for pid=5814 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.399350][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.426471][ T30] audit: type=1400 audit(1748931757.028:83): avc: denied { open } for pid=5814 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.426597][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.449817][ T30] audit: type=1400 audit(1748931757.028:84): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.479629][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.490349][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.493441][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.510183][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.846474][ T30] audit: type=1400 audit(1748931757.478:85): avc: denied { module_request } for pid=5813 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.949990][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 64.027535][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 64.042075][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 64.070197][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 64.111619][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 64.212809][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.220077][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.227521][ T5813] bridge_slave_0: entered allmulticast mode [ 64.234822][ T5813] bridge_slave_0: entered promiscuous mode [ 64.268158][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.275287][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.282611][ T5813] bridge_slave_1: entered allmulticast mode [ 64.289261][ T5813] bridge_slave_1: entered promiscuous mode [ 64.310786][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.317905][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.325429][ T5814] bridge_slave_0: entered allmulticast mode [ 64.332203][ T5814] bridge_slave_0: entered promiscuous mode [ 64.368742][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.376239][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.383660][ T5814] bridge_slave_1: entered allmulticast mode [ 64.390589][ T5814] bridge_slave_1: entered promiscuous mode [ 64.413332][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.420501][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.427584][ T5815] bridge_slave_0: entered allmulticast mode [ 64.434474][ T5815] bridge_slave_0: entered promiscuous mode [ 64.450338][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.457390][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.465094][ T5817] bridge_slave_0: entered allmulticast mode [ 64.472065][ T5817] bridge_slave_0: entered promiscuous mode [ 64.479590][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.486659][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.493883][ T5823] bridge_slave_0: entered allmulticast mode [ 64.501306][ T5823] bridge_slave_0: entered promiscuous mode [ 64.519108][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.528294][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.535391][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.543336][ T5815] bridge_slave_1: entered allmulticast mode [ 64.550054][ T5815] bridge_slave_1: entered promiscuous mode [ 64.556329][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.563615][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.570778][ T5817] bridge_slave_1: entered allmulticast mode [ 64.577386][ T5817] bridge_slave_1: entered promiscuous mode [ 64.584469][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.591949][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.599143][ T5823] bridge_slave_1: entered allmulticast mode [ 64.605729][ T5823] bridge_slave_1: entered promiscuous mode [ 64.621938][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.671023][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.701193][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.712064][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.723012][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.740961][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.751743][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.764028][ T5813] team0: Port device team_slave_0 added [ 64.771483][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.797266][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.816490][ T5813] team0: Port device team_slave_1 added [ 64.832554][ T5817] team0: Port device team_slave_0 added [ 64.855401][ T5814] team0: Port device team_slave_0 added [ 64.884486][ T5817] team0: Port device team_slave_1 added [ 64.900486][ T5814] team0: Port device team_slave_1 added [ 64.907447][ T5823] team0: Port device team_slave_0 added [ 64.922499][ T5815] team0: Port device team_slave_0 added [ 64.930908][ T5815] team0: Port device team_slave_1 added [ 64.974450][ T5823] team0: Port device team_slave_1 added [ 64.980964][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.987897][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.014636][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.034604][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.041606][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.067797][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.081994][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.089600][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.115513][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.134669][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.141693][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.168402][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.179935][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.186873][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.213080][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.225583][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.232681][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.258981][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.270245][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.277175][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.303475][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.320171][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.327109][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.353406][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.402692][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.410062][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.436464][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.449638][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.456588][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.482878][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.488681][ T5832] Bluetooth: hci3: command tx timeout [ 65.514974][ T5813] hsr_slave_0: entered promiscuous mode [ 65.521179][ T5813] hsr_slave_1: entered promiscuous mode [ 65.545207][ T5815] hsr_slave_0: entered promiscuous mode [ 65.550841][ T5832] Bluetooth: hci1: command tx timeout [ 65.557029][ T5815] hsr_slave_1: entered promiscuous mode [ 65.558584][ T5828] Bluetooth: hci2: command tx timeout [ 65.562818][ T5141] Bluetooth: hci4: command tx timeout [ 65.568570][ T5832] Bluetooth: hci0: command tx timeout [ 65.576308][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.586592][ T5815] Cannot create hsr debugfs directory [ 65.654378][ T5817] hsr_slave_0: entered promiscuous mode [ 65.660708][ T5817] hsr_slave_1: entered promiscuous mode [ 65.666569][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.676077][ T5817] Cannot create hsr debugfs directory [ 65.718569][ T5814] hsr_slave_0: entered promiscuous mode [ 65.724706][ T5814] hsr_slave_1: entered promiscuous mode [ 65.730828][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.738382][ T5814] Cannot create hsr debugfs directory [ 65.756217][ T5823] hsr_slave_0: entered promiscuous mode [ 65.762296][ T5823] hsr_slave_1: entered promiscuous mode [ 65.768626][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.776166][ T5823] Cannot create hsr debugfs directory [ 66.088293][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.099520][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.119575][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.133582][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.166149][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.178791][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.203361][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.212545][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.254639][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.264593][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.275536][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.284577][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.369180][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.388329][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.400265][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.425665][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.462650][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.507748][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.517753][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.542579][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.555492][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.562718][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.572526][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.579714][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.599190][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.618809][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.633423][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.646589][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.672252][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.707682][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.714801][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.724601][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.738812][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.745872][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.773232][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.780397][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.797715][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.805182][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.884891][ T30] audit: type=1400 audit(1748931760.518:86): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.916464][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.007778][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.043947][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.105066][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.127781][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.166051][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.194325][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.201478][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.220926][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.228066][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.237247][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.244399][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.267818][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.274984][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.327414][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.340120][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.374215][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.414156][ T5815] veth0_vlan: entered promiscuous mode [ 67.473354][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.495022][ T5815] veth1_vlan: entered promiscuous mode [ 67.549211][ T5832] Bluetooth: hci3: command tx timeout [ 67.567831][ T5823] veth0_vlan: entered promiscuous mode [ 67.593933][ T5823] veth1_vlan: entered promiscuous mode [ 67.621959][ T5815] veth0_macvtap: entered promiscuous mode [ 67.630033][ T5832] Bluetooth: hci0: command tx timeout [ 67.631865][ T5141] Bluetooth: hci4: command tx timeout [ 67.635447][ T5832] Bluetooth: hci2: command tx timeout [ 67.641108][ T5141] Bluetooth: hci1: command tx timeout [ 67.672351][ T5815] veth1_macvtap: entered promiscuous mode [ 67.697564][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.710859][ T5813] veth0_vlan: entered promiscuous mode [ 67.723921][ T5813] veth1_vlan: entered promiscuous mode [ 67.744801][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.774228][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.784922][ T5823] veth0_macvtap: entered promiscuous mode [ 67.805456][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.815617][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.827853][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.836886][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.853375][ T5823] veth1_macvtap: entered promiscuous mode [ 67.871899][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.907790][ T5817] veth0_vlan: entered promiscuous mode [ 67.916603][ T5813] veth0_macvtap: entered promiscuous mode [ 67.943957][ T5813] veth1_macvtap: entered promiscuous mode [ 67.964987][ T5817] veth1_vlan: entered promiscuous mode [ 67.982513][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.007730][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.020317][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.036560][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.063948][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.074754][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.084909][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.093748][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.111697][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.123648][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.133077][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.142431][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.243159][ T5817] veth0_macvtap: entered promiscuous mode [ 68.266157][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.272481][ T5814] veth0_vlan: entered promiscuous mode [ 68.279694][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.286308][ T5817] veth1_macvtap: entered promiscuous mode [ 68.339229][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.346923][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.358130][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.366508][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.375054][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.387796][ T5814] veth1_vlan: entered promiscuous mode [ 68.403455][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.421183][ T30] audit: type=1400 audit(1748931762.058:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EEn0js/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.435246][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.462362][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.481171][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.490229][ T30] audit: type=1400 audit(1748931762.088:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.513726][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.522458][ T30] audit: type=1400 audit(1748931762.098:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EEn0js/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.522502][ T30] audit: type=1400 audit(1748931762.098:90): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.522537][ T30] audit: type=1400 audit(1748931762.098:91): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EEn0js/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.548469][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.570300][ T30] audit: type=1400 audit(1748931762.108:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EEn0js/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.603633][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.605519][ T30] audit: type=1400 audit(1748931762.108:93): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.646802][ T5814] veth0_macvtap: entered promiscuous mode [ 68.679206][ T30] audit: type=1400 audit(1748931762.308:94): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.722251][ T30] audit: type=1400 audit(1748931762.308:95): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=6530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.725455][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.748529][ T30] audit: type=1400 audit(1748931762.308:96): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.773415][ T5814] veth1_macvtap: entered promiscuous mode [ 68.800600][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.808540][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.843738][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.854054][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.883816][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.922116][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.985320][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.003897][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.019276][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.030411][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.137754][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.156663][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.188207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.196726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.205786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 69.215041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.223568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.232319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.638026][ T5141] Bluetooth: hci3: command tx timeout [ 69.708864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.711272][ T5141] Bluetooth: hci1: command tx timeout [ 69.738314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.746802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.768185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.785566][ T5832] Bluetooth: hci2: command tx timeout [ 69.791478][ T5832] Bluetooth: hci4: command tx timeout [ 69.797163][ T5822] Bluetooth: hci0: command tx timeout [ 70.550169][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.598028][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.765980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.788171][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.862516][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.885453][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.912688][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.919277][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.150247][ T5944] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 71.236292][ T5951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13'. [ 71.324147][ T5944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.455341][ T5956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.708793][ T5832] Bluetooth: hci3: command tx timeout [ 71.886865][ T5832] Bluetooth: hci4: command tx timeout [ 71.886994][ T5822] Bluetooth: hci0: command tx timeout [ 71.892359][ T5832] Bluetooth: hci1: command tx timeout [ 71.897645][ T5828] Bluetooth: hci2: command tx timeout [ 72.744720][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 72.781565][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 72.794498][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 72.824233][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 76.123142][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 76.123173][ T30] audit: type=1400 audit(1748931769.398:141): avc: denied { read write } for pid=5968 comm="syz.0.17" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.644569][ T24] cfg80211: failed to load regulatory.db [ 76.651185][ T30] audit: type=1400 audit(1748931769.408:142): avc: denied { open } for pid=5968 comm="syz.0.17" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.248820][ T30] audit: type=1400 audit(1748931769.528:143): avc: denied { write } for pid=5968 comm="syz.0.17" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.180255][ T6007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.776758][ T6010] overlayfs: failed to resolve './file1/file0': -2 [ 80.103694][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.164406][ T30] audit: type=1400 audit(1748931773.788:144): avc: denied { create } for pid=6018 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.187280][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 80.210706][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 80.247344][ T30] audit: type=1400 audit(1748931773.818:145): avc: denied { create } for pid=6018 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.282418][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 80.583430][ T30] audit: type=1400 audit(1748931774.218:146): avc: denied { write } for pid=6025 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.787356][ T6035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.179739][ T30] audit: type=1400 audit(1748931775.808:147): avc: denied { unlink } for pid=6042 comm="syz.3.40" name="#1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.231615][ T30] audit: type=1400 audit(1748931775.808:148): avc: denied { mount } for pid=6042 comm="syz.3.40" name="/" dev="overlay" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.509445][ T6051] netlink: 'syz.4.42': attribute type 11 has an invalid length. [ 82.528030][ T6051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.42'. [ 82.577437][ T30] audit: type=1400 audit(1748931776.208:149): avc: denied { write } for pid=6050 comm="syz.4.42" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.033654][ T6062] overlayfs: failed to resolve './file1/file0': -2 [ 84.077669][ T30] audit: type=1400 audit(1748931777.708:150): avc: denied { create } for pid=6065 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.319183][ T30] audit: type=1400 audit(1748931777.778:151): avc: denied { allowed } for pid=6063 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.957845][ T30] audit: type=1400 audit(1748931777.778:152): avc: denied { create } for pid=6063 comm="syz.4.47" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.271717][ T6081] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 85.279472][ T6081] netlink: 17 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.932605][ T30] audit: type=1400 audit(1748931777.778:153): avc: denied { map } for pid=6063 comm="syz.4.47" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.957462][ T30] audit: type=1400 audit(1748931777.778:154): avc: denied { read write } for pid=6063 comm="syz.4.47" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.101607][ T30] audit: type=1400 audit(1748931777.788:155): avc: denied { write } for pid=6063 comm="syz.4.47" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.312463][ T30] audit: type=1400 audit(1748931777.788:156): avc: denied { open } for pid=6063 comm="syz.4.47" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.283458][ T6105] overlayfs: failed to resolve './file1/file0': -2 [ 87.314997][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 87.315013][ T30] audit: type=1400 audit(1748931780.948:176): avc: denied { write } for pid=6106 comm="syz.0.60" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.604427][ T5871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.793999][ T30] audit: type=1400 audit(1748931781.428:177): avc: denied { read write } for pid=6121 comm="syz.2.63" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.817430][ T30] audit: type=1400 audit(1748931781.428:178): avc: denied { open } for pid=6121 comm="syz.2.63" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.968057][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 88.018923][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.041883][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.105894][ T5871] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 88.125108][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.146886][ T5871] usb 1-1: Product: syz [ 88.151390][ T5871] usb 1-1: Manufacturer: syz [ 88.156041][ T5871] usb 1-1: SerialNumber: syz [ 88.179426][ T5871] usb 1-1: config 0 descriptor?? [ 88.243437][ T5871] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 88.354326][ T5871] gspca_stv06xx: st6422 sensor detected [ 88.736720][ T30] audit: type=1400 audit(1748931782.198:179): avc: denied { create } for pid=6128 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.419637][ T5871] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 89.488451][ T30] audit: type=1400 audit(1748931782.198:180): avc: denied { bind } for pid=6128 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.538353][ T5871] usb 1-1: USB disconnect, device number 2 [ 89.593808][ T30] audit: type=1400 audit(1748931782.198:181): avc: denied { setopt } for pid=6128 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.092391][ T6155] overlayfs: failed to resolve './file1/file0': -2 [ 93.782166][ T30] audit: type=1400 audit(1748931787.418:182): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.849960][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.81'. [ 93.864937][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.81'. [ 93.874023][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.81'. [ 93.983190][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.81'. [ 94.516416][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 94.552981][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 94.562286][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 94.571224][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 95.374517][ T30] audit: type=1400 audit(1748931789.008:183): avc: denied { write } for pid=6202 comm="syz.1.88" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.864984][ T30] audit: type=1400 audit(1748931789.458:184): avc: denied { ioctl } for pid=6202 comm="syz.1.88" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x5626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.476480][ T6287] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 102.489202][ T6287] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.177233][ T6312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.277969][ T6313] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 107.057959][ T30] audit: type=1400 audit(1748931800.668:185): avc: denied { ioctl } for pid=6347 comm="syz.2.122" path="/dev/vhost-net" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.510993][ T30] audit: type=1400 audit(1748931800.938:186): avc: denied { read } for pid=6347 comm="syz.2.122" dev="sockfs" ino=8119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.533687][ T30] audit: type=1400 audit(1748931800.968:187): avc: denied { create } for pid=6347 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.558388][ T6348] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.812724][ T30] audit: type=1400 audit(1748931801.198:188): avc: denied { write } for pid=6347 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.203625][ T30] audit: type=1400 audit(1748931801.818:189): avc: denied { ioctl } for pid=6347 comm="syz.2.122" path="socket:[8124]" dev="sockfs" ino=8124 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.528859][ T30] audit: type=1400 audit(1748931801.818:190): avc: denied { shutdown } for pid=6347 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.603506][ T30] audit: type=1400 audit(1748931801.988:191): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.672595][ T30] audit: type=1400 audit(1748931802.308:192): avc: denied { accept } for pid=6362 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.694431][ T30] audit: type=1400 audit(1748931802.328:193): avc: denied { write } for pid=6362 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.718764][ T30] audit: type=1400 audit(1748931802.348:194): avc: denied { read } for pid=6362 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.695763][ T6420] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.732674][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 117.732685][ T30] audit: type=1400 audit(1748931811.348:198): avc: denied { read write } for pid=6418 comm="syz.0.141" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.802311][ T30] audit: type=1400 audit(1748931811.348:199): avc: denied { open } for pid=6418 comm="syz.0.141" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.621747][ T30] audit: type=1400 audit(1748931812.258:200): avc: denied { mounton } for pid=6449 comm="syz.4.149" path="/31/bus" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.406178][ T6461] overlayfs: missing 'lowerdir' [ 120.410503][ T6473] overlayfs: failed to resolve './bus': -2 [ 125.880464][ T30] audit: type=1400 audit(1748931819.298:201): avc: denied { read write } for pid=6544 comm="syz.3.176" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.291290][ T30] audit: type=1400 audit(1748931819.298:202): avc: denied { open } for pid=6544 comm="syz.3.176" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.647827][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 127.664202][ T6564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 127.683778][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 130.169079][ T6599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.187'. [ 130.210306][ T6586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.187'. [ 131.408073][ T5861] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.927988][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 131.939727][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.971852][ T5861] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 131.993172][ T5861] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 132.031853][ T5861] usb 1-1: config 7 has no interface number 0 [ 132.049070][ T5861] usb 1-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.081273][ T5861] usb 1-1: config 7 interface 187 has no altsetting 0 [ 132.100373][ T5861] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 132.111781][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.126017][ T5861] usb 1-1: Product: syz [ 132.132660][ T5861] usb 1-1: Manufacturer: syz [ 132.137364][ T5861] usb 1-1: SerialNumber: syz [ 132.342794][ T30] audit: type=1400 audit(1748931825.958:203): avc: denied { read write } for pid=6623 comm="syz.1.199" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.407314][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.413871][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.684761][ T5861] usb 1-1: Not enough endpoints found in device, aborting! [ 132.727374][ T30] audit: type=1400 audit(1748931825.958:204): avc: denied { open } for pid=6623 comm="syz.1.199" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.864632][ T30] audit: type=1400 audit(1748931825.958:205): avc: denied { bind } for pid=6623 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.391336][ T30] audit: type=1400 audit(1748931825.958:206): avc: denied { listen } for pid=6623 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.493686][ T30] audit: type=1400 audit(1748931825.958:207): avc: denied { setopt } for pid=6623 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.631022][ T5861] usb 1-1: USB disconnect, device number 3 [ 134.698847][ T6645] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.757219][ T6660] netlink: 52 bytes leftover after parsing attributes in process `syz.2.209'. [ 136.811028][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 136.868859][ T6660] netlink: 52 bytes leftover after parsing attributes in process `syz.2.209'. [ 137.730960][ T6681] 9pnet: Could not find request transport: 0x0000000000000006 [ 138.105348][ T30] audit: type=1400 audit(1748931831.698:208): avc: denied { ioctl } for pid=6686 comm="syz.2.218" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.402211][ T30] audit: type=1400 audit(1748931831.698:209): avc: denied { set_context_mgr } for pid=6686 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.953796][ T30] audit: type=1400 audit(1748931831.798:210): avc: denied { write } for pid=6686 comm="syz.2.218" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.978644][ T30] audit: type=1400 audit(1748931831.828:211): avc: denied { map } for pid=6686 comm="syz.2.218" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.703335][ T30] audit: type=1400 audit(1748931834.878:212): avc: denied { connect } for pid=6740 comm="syz.2.237" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.785226][ T30] audit: type=1400 audit(1748931834.878:213): avc: denied { name_connect } for pid=6740 comm="syz.2.237" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 141.811125][ T30] audit: type=1400 audit(1748931835.388:214): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.327981][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.661137][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 143.694695][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.730484][ T5928] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 143.796262][ T5928] usb 3-1: config 7 has no interface number 0 [ 144.286830][ T5928] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 144.297958][ T5928] usb 3-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.314756][ T5928] usb 3-1: config 7 interface 187 has no altsetting 0 [ 144.350216][ T6771] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.409660][ T5928] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 144.419390][ T30] audit: type=1400 audit(1748931838.038:215): avc: denied { create } for pid=6776 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.439738][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.447737][ T5928] usb 3-1: Product: syz [ 144.468002][ T5928] usb 3-1: Manufacturer: syz [ 144.472629][ T5928] usb 3-1: SerialNumber: syz [ 144.566576][ T6755] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.588200][ T30] audit: type=1400 audit(1748931838.048:216): avc: denied { write } for pid=6776 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.869305][ T30] audit: type=1400 audit(1748931838.138:217): avc: denied { read } for pid=6776 comm="syz.4.250" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.891986][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.932994][ T5928] usb 3-1: Not enough endpoints found in device, aborting! [ 144.950429][ T30] audit: type=1400 audit(1748931838.138:218): avc: denied { open } for pid=6776 comm="syz.4.250" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.997079][ T30] audit: type=1400 audit(1748931838.148:219): avc: denied { ioctl } for pid=6776 comm="syz.4.250" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.101377][ T30] audit: type=1400 audit(1748931838.258:220): avc: denied { setopt } for pid=6776 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.137720][ T30] audit: type=1400 audit(1748931838.508:221): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.161817][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.172147][ T30] audit: type=1400 audit(1748931838.508:222): avc: denied { open } for pid=5814 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.196112][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.246663][ T30] audit: type=1400 audit(1748931838.508:223): avc: denied { ioctl } for pid=5814 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.419270][ T974] usb 3-1: USB disconnect, device number 2 [ 145.429172][ T30] audit: type=1400 audit(1748931838.568:224): avc: denied { ioctl } for pid=6754 comm="syz.2.241" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.855761][ T6828] Zero length message leads to an empty skb [ 148.958740][ T6834] No control pipe specified [ 149.619523][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 149.619539][ T30] audit: type=1400 audit(1748931842.718:276): avc: denied { bind } for pid=6830 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.816918][ T30] audit: type=1400 audit(1748931843.158:277): avc: denied { connect } for pid=6820 comm="syz.4.264" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.871039][ T30] audit: type=1400 audit(1748931843.288:278): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.954389][ T30] audit: type=1400 audit(1748931843.288:279): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.978388][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.282790][ T30] audit: type=1400 audit(1748931843.288:280): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.308276][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.316653][ T30] audit: type=1400 audit(1748931843.348:281): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 150.336976][ T30] audit: type=1400 audit(1748931843.428:282): avc: denied { read } for pid=6842 comm="syz.1.268" dev="nsfs" ino=4026533192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 150.357917][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.384824][ T30] audit: type=1400 audit(1748931843.428:283): avc: denied { open } for pid=6842 comm="syz.1.268" path="net:[4026533192]" dev="nsfs" ino=4026533192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 150.407955][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.426473][ T30] audit: type=1400 audit(1748931843.428:284): avc: denied { create } for pid=6842 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.456780][ T30] audit: type=1400 audit(1748931843.438:285): avc: denied { read write } for pid=6842 comm="syz.1.268" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.480081][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.424243][ T6894] warning: `syz.1.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.936607][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 154.936621][ T30] audit: type=1400 audit(1748931848.568:331): avc: denied { create } for pid=6895 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.218252][ T30] audit: type=1400 audit(1748931848.748:332): avc: denied { connect } for pid=6895 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.736035][ T30] audit: type=1400 audit(1748931848.758:333): avc: denied { ioctl } for pid=6895 comm="syz.3.286" path="socket:[9952]" dev="sockfs" ino=9952 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.857752][ T30] audit: type=1400 audit(1748931848.768:334): avc: denied { write } for pid=6895 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.887400][ T30] audit: type=1400 audit(1748931849.398:335): avc: denied { create } for pid=6902 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.918292][ T30] audit: type=1400 audit(1748931849.398:336): avc: denied { bind } for pid=6902 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.938606][ T30] audit: type=1400 audit(1748931849.458:337): avc: denied { remount } for pid=6902 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.458244][ T30] audit: type=1400 audit(1748931849.518:338): avc: denied { read write } for pid=6904 comm="syz.3.288" name="vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 156.530630][ T4139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.576641][ T30] audit: type=1400 audit(1748931849.518:339): avc: denied { open } for pid=6904 comm="syz.3.288" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 156.605939][ T30] audit: type=1400 audit(1748931849.678:340): avc: denied { connect } for pid=6904 comm="syz.3.288" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.649034][ T6911] netlink: 'syz.0.282': attribute type 11 has an invalid length. [ 156.678717][ T6911] netlink: 224 bytes leftover after parsing attributes in process `syz.0.282'. [ 156.728366][ T4139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.804041][ T4139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.087479][ T4139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.482419][ T6921] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 157.490215][ T6921] netlink: 17 bytes leftover after parsing attributes in process `syz.2.291'. [ 158.061813][ T6891] delete_channel: no stack [ 158.520005][ T4139] bridge_slave_1: left allmulticast mode [ 158.529706][ T4139] bridge_slave_1: left promiscuous mode [ 158.536941][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.738102][ T4139] bridge_slave_0: left allmulticast mode [ 158.744999][ T4139] bridge_slave_0: left promiscuous mode [ 159.948766][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.036723][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 160.036737][ T30] audit: type=1400 audit(1748931853.668:363): avc: denied { read open } for pid=6944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.091646][ T30] audit: type=1400 audit(1748931853.708:364): avc: denied { getattr } for pid=6944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.120829][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.131550][ T30] audit: type=1400 audit(1748931853.718:365): avc: denied { ioctl } for pid=6943 comm="syz-executor" path="socket:[10677]" dev="sockfs" ino=10677 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.158191][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.168176][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.178849][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.188217][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.214049][ T30] audit: type=1400 audit(1748931853.838:366): avc: denied { mounton } for pid=6943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 160.513552][ T30] audit: type=1400 audit(1748931854.148:367): avc: denied { create } for pid=6958 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.566115][ T30] audit: type=1400 audit(1748931854.148:368): avc: denied { ioctl } for pid=6958 comm="syz.1.304" path="/dev/vhost-net" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.600938][ T30] audit: type=1400 audit(1748931854.158:369): avc: denied { write } for pid=6958 comm="syz.1.304" name="cec1" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.628862][ T30] audit: type=1400 audit(1748931854.158:370): avc: denied { read } for pid=6958 comm="syz.1.304" dev="sockfs" ino=10175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.708102][ T30] audit: type=1400 audit(1748931854.168:371): avc: denied { mounton } for pid=6958 comm="syz.1.304" path="/67" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.740572][ T30] audit: type=1400 audit(1748931854.208:372): avc: denied { create } for pid=6958 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.263295][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.276076][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.286371][ T4139] bond0 (unregistering): Released all slaves [ 162.268023][ T5832] Bluetooth: hci3: command tx timeout [ 162.694460][ T4139] hsr_slave_0: left promiscuous mode [ 162.707095][ T4139] hsr_slave_1: left promiscuous mode [ 162.739303][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.746925][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.774328][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.798150][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.002863][ T4139] veth1_macvtap: left promiscuous mode [ 163.956199][ T4139] veth0_macvtap: left promiscuous mode [ 163.961929][ T4139] veth1_vlan: left promiscuous mode [ 163.969026][ T4139] veth0_vlan: left promiscuous mode [ 164.036504][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.048191][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.055722][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.064968][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.074979][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.316640][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.329969][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.340315][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.348380][ T5822] Bluetooth: hci3: command tx timeout [ 164.358925][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.369440][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.474735][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 164.497865][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 164.697539][ T6997] netlink: 2 bytes leftover after parsing attributes in process `syz.2.312'. [ 164.931786][ T6943] chnl_net:caif_netlink_parms(): no params data found [ 165.310673][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.325598][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.344605][ T6943] bridge_slave_0: entered allmulticast mode [ 165.363185][ T6943] bridge_slave_0: entered promiscuous mode [ 165.391029][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.408448][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.426020][ T6943] bridge_slave_1: entered allmulticast mode [ 165.455184][ T6943] bridge_slave_1: entered promiscuous mode [ 165.562496][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.591110][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.749422][ T6943] team0: Port device team_slave_0 added [ 165.824746][ T6998] delete_channel: no stack [ 165.942347][ T6943] team0: Port device team_slave_1 added [ 166.072937][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.091263][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.124412][ T5832] Bluetooth: hci0: command tx timeout [ 166.140624][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.157355][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.167038][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.193270][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.222745][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 166.403977][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 166.404013][ T30] audit: type=1400 audit(1748931860.038:386): avc: denied { create } for pid=7045 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.433023][ T5832] Bluetooth: hci4: command tx timeout [ 166.438788][ T5832] Bluetooth: hci3: command tx timeout [ 166.476290][ T7047] Illegal XDP return value 4294967274 on prog (id 60) dev N/A, expect packet loss! [ 166.478024][ T30] audit: type=1400 audit(1748931860.038:387): avc: denied { setopt } for pid=7045 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.721426][ T6943] hsr_slave_0: entered promiscuous mode [ 166.727840][ T6943] hsr_slave_1: entered promiscuous mode [ 166.741148][ T6943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.748817][ T6943] Cannot create hsr debugfs directory [ 166.760322][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 166.888808][ T4139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.142084][ T4139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.156637][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.164154][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.174784][ T7008] bridge_slave_0: entered allmulticast mode [ 167.191584][ T7008] bridge_slave_0: entered promiscuous mode [ 167.279789][ T30] audit: type=1400 audit(1748931860.888:388): avc: denied { unlink } for pid=7052 comm="syz.1.318" name="#25" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.390247][ T6014] wlan0: Trigger new scan to find an IBSS to join [ 167.416278][ T30] audit: type=1400 audit(1748931860.898:389): avc: denied { mount } for pid=7052 comm="syz.1.318" name="/" dev="overlay" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.596616][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.605000][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.612940][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.622395][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.631535][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.635201][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.639372][ T7008] bridge_slave_1: entered allmulticast mode [ 167.650150][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.665020][ T7008] bridge_slave_1: entered promiscuous mode [ 167.690613][ T4139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.813899][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.837276][ T4139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.857245][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.864783][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.873713][ T7002] bridge_slave_0: entered allmulticast mode [ 167.884517][ T7002] bridge_slave_0: entered promiscuous mode [ 167.981744][ T30] audit: type=1400 audit(1748931861.608:390): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 168.006704][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.028452][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.035630][ T7002] bridge_slave_1: entered allmulticast mode [ 168.052696][ T7002] bridge_slave_1: entered promiscuous mode [ 168.082414][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.159772][ T30] audit: type=1400 audit(1748931861.798:391): avc: denied { create } for pid=7077 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.189431][ T30] audit: type=1400 audit(1748931861.798:392): avc: denied { write } for pid=7077 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.208572][ T5832] Bluetooth: hci0: command tx timeout [ 168.309886][ T30] audit: type=1400 audit(1748931861.928:393): avc: denied { read } for pid=7077 comm="syz.1.320" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.332749][ T30] audit: type=1400 audit(1748931861.928:394): avc: denied { open } for pid=7077 comm="syz.1.320" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.356624][ T30] audit: type=1400 audit(1748931861.928:395): avc: denied { ioctl } for pid=7077 comm="syz.1.320" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.385768][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.498358][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.615246][ T5832] Bluetooth: hci3: command tx timeout [ 168.620739][ T5832] Bluetooth: hci4: command tx timeout [ 168.690220][ T7008] team0: Port device team_slave_0 added [ 168.725972][ T7008] team0: Port device team_slave_1 added [ 168.747556][ T7002] team0: Port device team_slave_0 added [ 168.756055][ T7002] team0: Port device team_slave_1 added [ 168.812288][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.819490][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.845798][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.907055][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.915094][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.941335][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.971444][ T4139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.988389][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.995715][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.030663][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.245571][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.253125][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.278994][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.285790][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.709214][ T5822] Bluetooth: hci1: command tx timeout [ 169.874032][ T4139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.955103][ T7008] hsr_slave_0: entered promiscuous mode [ 169.965606][ T7008] hsr_slave_1: entered promiscuous mode [ 169.971853][ T7008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.981110][ T7008] Cannot create hsr debugfs directory [ 170.129730][ T4139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.292149][ T5832] Bluetooth: hci0: command tx timeout [ 170.668118][ T5832] Bluetooth: hci4: command tx timeout [ 170.758539][ T4139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.810984][ T7056] chnl_net:caif_netlink_parms(): no params data found [ 170.848014][ T7002] hsr_slave_0: entered promiscuous mode [ 170.854069][ T7002] hsr_slave_1: entered promiscuous mode [ 170.860920][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.869060][ T7002] Cannot create hsr debugfs directory [ 171.170909][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.191323][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.200736][ T7056] bridge_slave_0: entered allmulticast mode [ 171.210173][ T7056] bridge_slave_0: entered promiscuous mode [ 171.253181][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.261438][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.271388][ T7056] bridge_slave_1: entered allmulticast mode [ 171.283086][ T7056] bridge_slave_1: entered promiscuous mode [ 171.357851][ T4139] bridge_slave_1: left allmulticast mode [ 171.364351][ T4139] bridge_slave_1: left promiscuous mode [ 171.370338][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.381504][ T4139] bridge_slave_0: left allmulticast mode [ 171.387145][ T4139] bridge_slave_0: left promiscuous mode [ 171.393768][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.393954][ T3017] wlan0: Trigger new scan to find an IBSS to join [ 171.409582][ T4139] bridge_slave_1: left allmulticast mode [ 171.415221][ T4139] bridge_slave_1: left promiscuous mode [ 171.422029][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.430400][ T4139] bridge_slave_0: left allmulticast mode [ 171.436024][ T4139] bridge_slave_0: left promiscuous mode [ 171.442874][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.697008][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.707618][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.718481][ T4139] bond0 (unregistering): Released all slaves [ 171.727139][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 171.727151][ T30] audit: type=1400 audit(1748931865.358:413): avc: denied { execmem } for pid=7118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 171.789976][ T5832] Bluetooth: hci1: command tx timeout [ 171.826792][ T4139] bond1 (unregistering): Released all slaves [ 171.921060][ T30] audit: type=1400 audit(1748931865.548:414): avc: denied { create } for pid=7119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.935404][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.946756][ T30] audit: type=1400 audit(1748931865.548:415): avc: denied { read write } for pid=7119 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 171.957215][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.980916][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.982718][ T30] audit: type=1400 audit(1748931865.548:416): avc: denied { open } for pid=7119 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 171.997278][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.015598][ T30] audit: type=1400 audit(1748931865.568:417): avc: denied { ioctl } for pid=7119 comm="syz-executor" path="socket:[11598]" dev="sockfs" ino=11598 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.019611][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.043938][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.066613][ T30] audit: type=1400 audit(1748931865.698:418): avc: denied { mounton } for pid=7119 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 172.162997][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.172736][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.182566][ T4139] bond0 (unregistering): Released all slaves [ 172.194102][ T6943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.215539][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.280250][ T6943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.292341][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.328688][ T6943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.342685][ T13] wlan0: Creating new IBSS network, BSSID 1a:f7:5f:28:ab:32 [ 172.351569][ T5822] Bluetooth: hci0: command tx timeout [ 172.388418][ T6943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.402412][ T7056] team0: Port device team_slave_0 added [ 172.445059][ T7056] team0: Port device team_slave_1 added [ 172.534970][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.542550][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.568885][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.581708][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.588837][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.615152][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.716124][ T7056] hsr_slave_0: entered promiscuous mode [ 172.723091][ T7056] hsr_slave_1: entered promiscuous mode [ 172.729525][ T7056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.737065][ T7056] Cannot create hsr debugfs directory [ 172.751502][ T5822] Bluetooth: hci4: command tx timeout [ 172.806364][ T30] audit: type=1400 audit(1748931866.438:419): avc: denied { module_request } for pid=7119 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.867248][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 172.895812][ T4139] hsr_slave_0: left promiscuous mode [ 172.902606][ T4139] hsr_slave_1: left promiscuous mode [ 172.909324][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.916714][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.924730][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.932157][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.943275][ T4139] hsr_slave_0: left promiscuous mode [ 172.949253][ T4139] hsr_slave_1: left promiscuous mode [ 172.954801][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.962340][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.970314][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.977866][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.001187][ T4139] veth1_macvtap: left promiscuous mode [ 173.006693][ T4139] veth0_macvtap: left promiscuous mode [ 173.012387][ T4139] veth1_vlan: left promiscuous mode [ 173.017617][ T4139] veth0_vlan: left promiscuous mode [ 173.024471][ T4139] veth1_macvtap: left promiscuous mode [ 173.030038][ T4139] veth0_macvtap: left promiscuous mode [ 173.035945][ T4139] veth1_vlan: left promiscuous mode [ 173.041579][ T4139] veth0_vlan: left promiscuous mode [ 173.311498][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 173.339678][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 173.701968][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 173.727715][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 173.868403][ T5822] Bluetooth: hci1: command tx timeout [ 174.108035][ T5822] Bluetooth: hci2: command tx timeout [ 174.122431][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.130158][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.137253][ T7119] bridge_slave_0: entered allmulticast mode [ 174.146514][ T7119] bridge_slave_0: entered promiscuous mode [ 174.154088][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.161634][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.169039][ T7119] bridge_slave_1: entered allmulticast mode [ 174.175666][ T7119] bridge_slave_1: entered promiscuous mode [ 174.224748][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.236658][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.280388][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.299856][ T7119] team0: Port device team_slave_0 added [ 174.317131][ T7119] team0: Port device team_slave_1 added [ 174.364687][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.386653][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.394097][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.420900][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.436447][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.443563][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.456875][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.464195][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.496548][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.516865][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.523937][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.580827][ T7119] hsr_slave_0: entered promiscuous mode [ 174.586956][ T7119] hsr_slave_1: entered promiscuous mode [ 174.680491][ T7008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.694794][ T7008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.705127][ T30] audit: type=1400 audit(1748931868.348:420): avc: denied { read open } for pid=7130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.730482][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.737256][ T30] audit: type=1400 audit(1748931868.348:421): avc: denied { getattr } for pid=7130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.762468][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.768949][ T30] audit: type=1400 audit(1748931868.348:422): avc: denied { getattr } for pid=7130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.795070][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.824255][ T7056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.854363][ T7008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.905212][ T7008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.937220][ T7056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.051337][ T7056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.133745][ T7056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.197624][ T4139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.324835][ T4139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.404097][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.421779][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.461253][ T4139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.523218][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.550033][ T4139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.601259][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.608463][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.634044][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.641196][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.667097][ T7002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.684623][ T7002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.705400][ T7002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.777491][ T7002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.946932][ T4139] bridge_slave_1: left allmulticast mode [ 175.953465][ T4139] bridge_slave_1: left promiscuous mode [ 175.958520][ T5822] Bluetooth: hci1: command tx timeout [ 175.969219][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.988831][ T4139] bridge_slave_0: left allmulticast mode [ 175.994494][ T4139] bridge_slave_0: left promiscuous mode [ 176.003962][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.034733][ T4139] bridge_slave_1: left allmulticast mode [ 176.041423][ T4139] bridge_slave_1: left promiscuous mode [ 176.047094][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.059355][ T4139] bridge_slave_0: left allmulticast mode [ 176.065019][ T4139] bridge_slave_0: left promiscuous mode [ 176.077715][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.188260][ T5822] Bluetooth: hci2: command tx timeout [ 176.381593][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.392397][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.412649][ T4139] bond0 (unregistering): Released all slaves [ 176.660887][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.672974][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.686691][ T4139] bond0 (unregistering): Released all slaves [ 176.790810][ T6943] veth0_vlan: entered promiscuous mode [ 176.934803][ T6943] veth1_vlan: entered promiscuous mode [ 176.964745][ T7008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.092422][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.115261][ T6943] veth0_macvtap: entered promiscuous mode [ 177.175803][ T6943] veth1_macvtap: entered promiscuous mode [ 177.223443][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.240736][ T7008] veth0_vlan: entered promiscuous mode [ 177.287160][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.307257][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.314416][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.337431][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.344569][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.361605][ T7056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.384670][ T7008] veth1_vlan: entered promiscuous mode [ 177.416925][ T7056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.441696][ T7056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.456722][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.491288][ T7056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.519955][ T7008] veth0_macvtap: entered promiscuous mode [ 177.542982][ T7008] veth1_macvtap: entered promiscuous mode [ 177.555713][ T4139] hsr_slave_0: left promiscuous mode [ 177.568502][ T4139] hsr_slave_1: left promiscuous mode [ 177.574339][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.582474][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.594962][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.604717][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.616529][ T4139] hsr_slave_0: left promiscuous mode [ 177.623088][ T4139] hsr_slave_1: left promiscuous mode [ 177.632632][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.643485][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.651748][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.659994][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.691654][ T4139] veth1_macvtap: left promiscuous mode [ 177.697213][ T4139] veth0_macvtap: left promiscuous mode [ 177.704458][ T4139] veth1_vlan: left promiscuous mode [ 177.712729][ T4139] veth0_vlan: left promiscuous mode [ 177.723233][ T4139] veth1_macvtap: left promiscuous mode [ 177.728827][ T4139] veth0_macvtap: left promiscuous mode [ 177.734411][ T4139] veth1_vlan: left promiscuous mode [ 177.743571][ T4139] veth0_vlan: left promiscuous mode [ 178.166571][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 178.193954][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 178.270031][ T5822] Bluetooth: hci2: command tx timeout [ 178.561882][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 178.585420][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 178.766668][ T6943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.775617][ T6943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.784534][ T6943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.793422][ T6943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.836909][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.853770][ T7002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.865034][ T7002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.897023][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.940365][ T7008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.956631][ T7008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.967095][ T7008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.976386][ T7008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.997010][ T7119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.024390][ T7119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.046481][ T7119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.097069][ T7119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.150820][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.165041][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.257401][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.266113][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.319869][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.320855][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 179.320866][ T30] audit: type=1400 audit(1748931872.958:432): avc: denied { mounton } for pid=6943 comm="syz-executor" path="/root/syzkaller.o88BYC/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 179.352274][ T7002] veth0_vlan: entered promiscuous mode [ 179.375492][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.380135][ T30] audit: type=1400 audit(1748931872.998:433): avc: denied { mount } for pid=6943 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 179.393395][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.407794][ T30] audit: type=1400 audit(1748931872.998:434): avc: denied { mounton } for pid=6943 comm="syz-executor" path="/root/syzkaller.o88BYC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.436361][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.444489][ T30] audit: type=1400 audit(1748931872.998:435): avc: denied { mount } for pid=6943 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 179.467662][ T30] audit: type=1400 audit(1748931873.008:436): avc: denied { mounton } for pid=6943 comm="syz-executor" path="/root/syzkaller.o88BYC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 179.477832][ T7002] veth1_vlan: entered promiscuous mode [ 179.522699][ T30] audit: type=1400 audit(1748931873.008:437): avc: denied { mounton } for pid=6943 comm="syz-executor" path="/root/syzkaller.o88BYC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 179.538370][ T7002] veth0_macvtap: entered promiscuous mode [ 179.556601][ T30] audit: type=1400 audit(1748931873.028:438): avc: denied { unmount } for pid=6943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 179.580522][ T30] audit: type=1400 audit(1748931873.058:439): avc: denied { mounton } for pid=6943 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 179.595867][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.631541][ T30] audit: type=1400 audit(1748931873.058:440): avc: denied { mount } for pid=6943 comm="syz-executor" name="/" dev="gadgetfs" ino=14443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 179.633841][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.659455][ T30] audit: type=1400 audit(1748931873.058:441): avc: denied { mount } for pid=6943 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.660824][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.238517][ T7002] veth1_macvtap: entered promiscuous mode [ 180.261647][ T7056] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.307547][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.314722][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.347489][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.354687][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.358252][ T5822] Bluetooth: hci2: command tx timeout [ 180.374090][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.384291][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.485199][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.492365][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.537613][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.544815][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.573532][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.636400][ T7002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.646297][ T7002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.657521][ T7002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.666954][ T7002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.285764][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.340296][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.534920][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.078261][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.105862][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.209745][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.266406][ T7119] veth0_vlan: entered promiscuous mode [ 182.281484][ T7119] veth1_vlan: entered promiscuous mode [ 182.309727][ T7119] veth0_macvtap: entered promiscuous mode [ 182.336229][ T7056] veth0_vlan: entered promiscuous mode [ 182.360809][ T7269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 182.373716][ T7119] veth1_macvtap: entered promiscuous mode [ 182.386474][ T7056] veth1_vlan: entered promiscuous mode [ 182.736729][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 182.835810][ T7270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 182.919787][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.204188][ T7056] veth0_macvtap: entered promiscuous mode [ 183.221716][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.279314][ T7056] veth1_macvtap: entered promiscuous mode [ 183.600116][ T7119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.693512][ T7119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.712217][ T7119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.722544][ T7119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.936274][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.375234][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 184.375272][ T30] audit: type=1400 audit(1748931877.998:477): avc: denied { read } for pid=7277 comm="syz.3.334" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 184.610661][ T30] audit: type=1400 audit(1748931877.998:478): avc: denied { open } for pid=7277 comm="syz.3.334" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 184.639542][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.665365][ T7056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.676936][ T7056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.687136][ T7056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.698826][ T7056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.773817][ T30] audit: type=1400 audit(1748931878.368:479): avc: denied { create } for pid=7286 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.806403][ T30] audit: type=1400 audit(1748931878.378:480): avc: denied { write } for pid=7286 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.053215][ T30] audit: type=1400 audit(1748931878.378:481): avc: denied { nlmsg_write } for pid=7286 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.253495][ T6014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.295231][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.361268][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.426686][ T6014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.542576][ T4139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.558339][ T4139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.588899][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.599480][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.635762][ T6014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.667086][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 185.800755][ T6014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.828682][ T30] audit: type=1400 audit(1748931879.448:482): avc: denied { create } for pid=7297 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.982550][ T7301] tipc: Enabling of bearer rejected, failed to enable media [ 186.024951][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.045045][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.053331][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.094553][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.111150][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.124121][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.128132][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.267575][ T30] audit: type=1400 audit(1748931880.898:483): avc: denied { read write } for pid=7308 comm="syz.3.344" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 187.758800][ T30] audit: type=1400 audit(1748931880.898:484): avc: denied { open } for pid=7308 comm="syz.3.344" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 187.811477][ T30] audit: type=1400 audit(1748931880.988:485): avc: denied { read write } for pid=7313 comm="syz.1.345" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.984437][ T30] audit: type=1400 audit(1748931880.988:486): avc: denied { open } for pid=7313 comm="syz.1.345" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.458714][ T5822] Bluetooth: hci4: command tx timeout [ 188.688091][ T6014] bridge_slave_1: left allmulticast mode [ 188.702292][ T6014] bridge_slave_1: left promiscuous mode [ 188.711217][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.753461][ T6014] bridge_slave_0: left allmulticast mode [ 188.776032][ T6014] bridge_slave_0: left promiscuous mode [ 188.803887][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.208212][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.389086][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 189.403632][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.428417][ T5867] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 189.436603][ T5867] usb 3-1: config 7 has no interface number 0 [ 189.461501][ T5867] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 189.488329][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.496918][ T5867] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.518336][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.526961][ T5867] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 189.538589][ T6014] bond0 (unregistering): Released all slaves [ 189.548386][ T5867] usb 3-1: config 7 interface 187 has no altsetting 0 [ 189.557754][ T5867] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 189.568574][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.576572][ T5867] usb 3-1: Product: syz [ 189.585902][ T5867] usb 3-1: Manufacturer: syz [ 189.607986][ T5867] usb 3-1: SerialNumber: syz [ 189.638425][ T7331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.758028][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 189.758071][ T30] audit: type=1400 audit(1748931883.378:491): avc: denied { connect } for pid=7333 comm="syz.4.351" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.967347][ T5867] usb 3-1: Cannot retrieve CPort count: -32 [ 189.973429][ T5867] usb 3-1: Cannot retrieve CPort count: -32 [ 189.981526][ T30] audit: type=1400 audit(1748931883.438:492): avc: denied { connect } for pid=7333 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.983649][ T5867] es2_ap_driver 3-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 190.020447][ T30] audit: type=1400 audit(1748931883.438:493): avc: denied { setopt } for pid=7333 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.131289][ T30] audit: type=1400 audit(1748931883.438:494): avc: denied { bind } for pid=7333 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.181587][ T30] audit: type=1400 audit(1748931883.438:495): avc: denied { write } for pid=7333 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.213493][ T5867] usb 3-1: USB disconnect, device number 3 [ 190.512047][ T5822] Bluetooth: hci4: command tx timeout [ 190.572138][ T6014] hsr_slave_0: left promiscuous mode [ 190.598501][ T6014] hsr_slave_1: left promiscuous mode [ 190.605182][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.622064][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.644800][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.668161][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.767935][ T6014] veth1_macvtap: left promiscuous mode [ 190.773484][ T6014] veth0_macvtap: left promiscuous mode [ 190.791681][ T6014] veth1_vlan: left promiscuous mode [ 191.332773][ T6014] veth0_vlan: left promiscuous mode [ 191.621441][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.649154][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.661199][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.670913][ T30] audit: type=1400 audit(1748931885.298:496): avc: denied { create } for pid=7373 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.673738][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.692960][ T30] audit: type=1400 audit(1748931885.298:497): avc: denied { write } for pid=7373 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.707038][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.744742][ T30] audit: type=1400 audit(1748931885.298:498): avc: denied { read } for pid=7373 comm="syz.4.359" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.088364][ T30] audit: type=1400 audit(1748931885.298:499): avc: denied { open } for pid=7373 comm="syz.4.359" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.111888][ T30] audit: type=1400 audit(1748931885.718:500): avc: denied { bind } for pid=7373 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.300990][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 192.327381][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 192.588176][ T5822] Bluetooth: hci4: command tx timeout [ 193.802528][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.823815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.103700][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 194.110606][ T5822] Bluetooth: hci0: command tx timeout [ 194.677104][ T5822] Bluetooth: hci4: command tx timeout [ 194.797841][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 194.797855][ T30] audit: type=1400 audit(1748931888.428:541): avc: denied { getattr } for pid=7403 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.977963][ T30] audit: type=1400 audit(1748931888.608:542): avc: denied { write } for pid=7399 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.043702][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.058114][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.065309][ T7303] bridge_slave_0: entered allmulticast mode [ 195.078363][ T30] audit: type=1400 audit(1748931888.638:543): avc: denied { create } for pid=7409 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 195.114546][ T7303] bridge_slave_0: entered promiscuous mode [ 195.134838][ T30] audit: type=1400 audit(1748931888.658:544): avc: denied { prog_run } for pid=7409 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.166961][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.216968][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.235267][ T7303] bridge_slave_1: entered allmulticast mode [ 195.245068][ T30] audit: type=1400 audit(1748931888.658:545): avc: denied { connect } for pid=7399 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.532541][ T7303] bridge_slave_1: entered promiscuous mode [ 195.656484][ T30] audit: type=1400 audit(1748931888.658:546): avc: denied { write } for pid=7399 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.676243][ T30] audit: type=1400 audit(1748931888.978:547): avc: denied { setopt } for pid=7409 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 195.738528][ T30] audit: type=1400 audit(1748931888.998:548): avc: denied { ioctl } for pid=7409 comm="syz.1.367" path="socket:[15282]" dev="sockfs" ino=15282 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.909550][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.955534][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.034854][ T30] audit: type=1400 audit(1748931889.638:549): avc: denied { add_name } for pid=7400 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.203149][ T5822] Bluetooth: hci0: command tx timeout [ 196.330227][ T30] audit: type=1400 audit(1748931889.638:550): avc: denied { create } for pid=7400 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.549456][ T7303] team0: Port device team_slave_0 added [ 196.643093][ T6014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.675230][ T7303] team0: Port device team_slave_1 added [ 196.811038][ T6014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.933136][ T7369] chnl_net:caif_netlink_parms(): no params data found [ 197.067055][ T6014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.085271][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.092437][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.048299][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.064064][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.073158][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.104773][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.147813][ T7415] delete_channel: no stack [ 198.331685][ T5822] Bluetooth: hci0: command tx timeout [ 198.426011][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 198.435076][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 198.444210][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 198.858319][ T7449] binder: BINDER_SET_CONTEXT_MGR already set [ 198.863540][ T6014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.875194][ T7449] binder: 7448:7449 ioctl 4018620d 200000000040 returned -16 [ 200.059999][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 200.060015][ T30] audit: type=1400 audit(1748931893.688:592): avc: denied { create } for pid=7464 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.149551][ T30] audit: type=1400 audit(1748931893.728:593): avc: denied { write } for pid=7464 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.210598][ T7303] hsr_slave_0: entered promiscuous mode [ 200.220054][ T30] audit: type=1400 audit(1748931893.728:594): avc: denied { read } for pid=7464 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.242058][ T7303] hsr_slave_1: entered promiscuous mode [ 200.257188][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.286551][ T30] audit: type=1400 audit(1748931893.748:595): avc: denied { ioctl } for pid=7464 comm="syz.4.375" path="socket:[15593]" dev="sockfs" ino=15593 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.315778][ T30] audit: type=1400 audit(1748931893.908:596): avc: denied { execmem } for pid=7470 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 200.363204][ T5822] Bluetooth: hci0: command tx timeout [ 200.373304][ T30] audit: type=1400 audit(1748931893.978:597): avc: denied { create } for pid=7471 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.432389][ T7303] Cannot create hsr debugfs directory [ 201.236034][ T30] audit: type=1400 audit(1748931894.098:598): avc: denied { create } for pid=7471 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.255506][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.276666][ T30] audit: type=1400 audit(1748931894.828:599): avc: denied { setopt } for pid=7471 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.299828][ T30] audit: type=1400 audit(1748931894.828:600): avc: denied { map_create } for pid=7471 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.329155][ T7462] netlink: 2 bytes leftover after parsing attributes in process `syz.1.374'. [ 201.352104][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.560684][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.569029][ T30] audit: type=1400 audit(1748931894.828:601): avc: denied { read } for pid=7471 comm="syz.2.378" dev="nsfs" ino=4026532847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 201.595909][ T7369] bridge_slave_0: entered allmulticast mode [ 201.603566][ T7369] bridge_slave_0: entered promiscuous mode [ 201.722721][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.730150][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.737394][ T7369] bridge_slave_1: entered allmulticast mode [ 201.745231][ T7369] bridge_slave_1: entered promiscuous mode [ 201.980889][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.997258][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.199979][ T7369] team0: Port device team_slave_0 added [ 202.214626][ T7369] team0: Port device team_slave_1 added [ 202.403652][ T6014] bridge_slave_1: left allmulticast mode [ 202.410383][ T6014] bridge_slave_1: left promiscuous mode [ 202.416219][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.435643][ T6014] bridge_slave_0: left allmulticast mode [ 202.443483][ T6014] bridge_slave_0: left promiscuous mode [ 202.450328][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.656481][ T7463] delete_channel: no stack [ 204.033040][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.052909][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.064228][ T6014] bond0 (unregistering): Released all slaves [ 204.083567][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.092618][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.155770][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.325342][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.368089][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.400441][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.560267][ T153] wlan0: Trigger new scan to find an IBSS to join [ 205.122234][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 205.123133][ T30] audit: type=1400 audit(1748931898.718:635): avc: denied { setopt } for pid=7516 comm="syz.2.385" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.444133][ T30] audit: type=1400 audit(1748931898.718:636): avc: denied { connect } for pid=7516 comm="syz.2.385" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.500653][ T30] audit: type=1400 audit(1748931898.718:637): avc: denied { connect } for pid=7516 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.604000][ T30] audit: type=1400 audit(1748931898.718:638): avc: denied { setopt } for pid=7516 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.638075][ T30] audit: type=1400 audit(1748931898.718:639): avc: denied { bind } for pid=7516 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.692048][ T30] audit: type=1400 audit(1748931898.718:640): avc: denied { write } for pid=7516 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.763756][ T30] audit: type=1400 audit(1748931898.878:641): avc: denied { module_request } for pid=7516 comm="syz.2.385" kmod="net-pf-2-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 205.828745][ T30] audit: type=1400 audit(1748931898.928:642): avc: denied { write } for pid=7516 comm="syz.2.385" laddr=fe80::a8aa:aaff:feaa:aaaa lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.894435][ T30] audit: type=1400 audit(1748931899.438:643): avc: denied { create } for pid=7538 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.093007][ T30] audit: type=1400 audit(1748931899.438:644): avc: denied { ioctl } for pid=7538 comm="syz.2.389" path="socket:[15804]" dev="sockfs" ino=15804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.430533][ T3017] wlan0: Trigger new scan to find an IBSS to join [ 208.455070][ T7369] hsr_slave_0: entered promiscuous mode [ 208.461564][ T7369] hsr_slave_1: entered promiscuous mode [ 208.468253][ T7369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.475870][ T7369] Cannot create hsr debugfs directory [ 208.524578][ T6014] hsr_slave_0: left promiscuous mode [ 208.550054][ T6014] hsr_slave_1: left promiscuous mode [ 208.563239][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.585588][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.618915][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.630836][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.644370][ T6014] veth1_macvtap: left promiscuous mode [ 208.650037][ T6014] veth0_macvtap: left promiscuous mode [ 208.655588][ T6014] veth1_vlan: left promiscuous mode [ 208.661164][ T6014] veth0_vlan: left promiscuous mode [ 209.376404][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 209.443526][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 209.551919][ T36] wlan0: Creating new IBSS network, BSSID 16:d9:b4:e1:31:2b [ 209.843183][ T12] ------------[ cut here ]------------ [ 209.848826][ T12] WARNING: CPU: 1 PID: 12 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4d5/0x580 [ 209.858740][ T12] Modules linked in: [ 209.862751][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 209.874639][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.884944][ T12] Workqueue: cfg80211 cfg80211_event_work [ 209.890969][ T12] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 209.897389][ T12] Code: ff ff e8 0e 8d e0 f6 90 0f 0b 90 e9 58 fe ff ff e8 70 50 47 f7 e9 22 fc ff ff e8 06 50 47 f7 e9 66 fc ff ff e8 ec 8c e0 f6 90 <0f> 0b 90 e9 6f fc ff ff e8 de 8c e0 f6 90 0f 0b e8 76 50 47 f7 e9 [ 209.917050][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.923975][ T12] RSP: 0018:ffffc90000117af0 EFLAGS: 00010293 [ 209.930172][ T12] RAX: 0000000000000000 RBX: ffff88804f510d90 RCX: 0000000000000006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 209.938217][ T12] RDX: ffff88801e2a4880 RSI: ffffffff8adb8a74 RDI: ffffffff8c154e20 [ 209.946231][ T12] RBP: ffffc90000117ba0 R08: 0000000000000001 R09: 0000000000000001 [ 209.954523][ T12] R10: ffffffff90a7c057 R11: 0000000000000001 R12: ffff88804f510000 [ 209.963104][ T12] R13: 1ffff92000022f62 R14: 0000000000000000 R15: ffffc90000117b30 [ 209.971273][ T12] FS: 0000000000000000(0000) GS:ffff888124865000(0000) knlGS:0000000000000000 [ 209.980288][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.987533][ T12] CR2: 00007ffc5cb64f98 CR3: 000000000e382000 CR4: 00000000003526f0 [ 209.995633][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.003731][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.011768][ T12] Call Trace: [ 210.015073][ T12] [ 210.018093][ T12] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.023152][ T12] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 210.029187][ T12] ? mark_held_locks+0x49/0x80 [ 210.034008][ T12] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 210.040132][ T12] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 210.046293][ T12] cfg80211_process_rdev_events+0x9f/0x130 [ 210.052397][ T12] cfg80211_event_work+0x2e/0x50 [ 210.057373][ T12] process_one_work+0x9cf/0x1b70 [ 210.062372][ T12] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 210.068080][ T12] ? __pfx_process_one_work+0x10/0x10 [ 210.073465][ T12] ? assign_work+0x1a0/0x250 [ 210.078173][ T12] worker_thread+0x6c8/0xf10 [ 210.082824][ T12] ? __pfx_worker_thread+0x10/0x10 [ 210.087987][ T12] kthread+0x3c5/0x780 [ 210.092081][ T12] ? __pfx_kthread+0x10/0x10 [ 210.096700][ T12] ? rcu_is_watching+0x12/0xc0 [ 210.101541][ T12] ? __pfx_kthread+0x10/0x10 [ 210.106161][ T12] ret_from_fork+0x5d4/0x6f0 [ 210.110837][ T12] ? __pfx_kthread+0x10/0x10 [ 210.115472][ T12] ret_from_fork_asm+0x1a/0x30 [ 210.120302][ T12] [ 210.123348][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.130622][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 210.142234][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.152275][ T12] Workqueue: cfg80211 cfg80211_event_work [ 210.157991][ T12] Call Trace: [ 210.161258][ T12] [ 210.164170][ T12] dump_stack_lvl+0x3d/0x1f0 [ 210.168761][ T12] panic+0x71c/0x800 [ 210.172648][ T12] ? __pfx_panic+0x10/0x10 [ 210.177053][ T12] ? show_trace_log_lvl+0x29b/0x3e0 [ 210.182248][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 210.187364][ T12] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 210.192913][ T12] check_panic_on_warn+0xab/0xb0 [ 210.197919][ T12] __warn+0xf6/0x3c0 [ 210.201822][ T12] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 210.207399][ T12] report_bug+0x3c3/0x580 [ 210.211728][ T12] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 210.217277][ T12] handle_bug+0x184/0x210 [ 210.221597][ T12] exc_invalid_op+0x17/0x50 [ 210.226090][ T12] asm_exc_invalid_op+0x1a/0x20 [ 210.230924][ T12] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 210.237099][ T12] Code: ff ff e8 0e 8d e0 f6 90 0f 0b 90 e9 58 fe ff ff e8 70 50 47 f7 e9 22 fc ff ff e8 06 50 47 f7 e9 66 fc ff ff e8 ec 8c e0 f6 90 <0f> 0b 90 e9 6f fc ff ff e8 de 8c e0 f6 90 0f 0b e8 76 50 47 f7 e9 [ 210.256694][ T12] RSP: 0018:ffffc90000117af0 EFLAGS: 00010293 [ 210.262746][ T12] RAX: 0000000000000000 RBX: ffff88804f510d90 RCX: 0000000000000006 [ 210.270720][ T12] RDX: ffff88801e2a4880 RSI: ffffffff8adb8a74 RDI: ffffffff8c154e20 [ 210.278675][ T12] RBP: ffffc90000117ba0 R08: 0000000000000001 R09: 0000000000000001 [ 210.286628][ T12] R10: ffffffff90a7c057 R11: 0000000000000001 R12: ffff88804f510000 [ 210.294586][ T12] R13: 1ffff92000022f62 R14: 0000000000000000 R15: ffffc90000117b30 [ 210.302552][ T12] ? __cfg80211_ibss_joined+0x4d4/0x580 [ 210.308093][ T12] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.313104][ T12] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 210.318987][ T12] ? mark_held_locks+0x49/0x80 [ 210.323742][ T12] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 210.329791][ T12] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 210.335676][ T12] cfg80211_process_rdev_events+0x9f/0x130 [ 210.341463][ T12] cfg80211_event_work+0x2e/0x50 [ 210.346384][ T12] process_one_work+0x9cf/0x1b70 [ 210.351312][ T12] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 210.356929][ T12] ? __pfx_process_one_work+0x10/0x10 [ 210.362306][ T12] ? assign_work+0x1a0/0x250 [ 210.366881][ T12] worker_thread+0x6c8/0xf10 [ 210.371463][ T12] ? __pfx_worker_thread+0x10/0x10 [ 210.376563][ T12] kthread+0x3c5/0x780 [ 210.380618][ T12] ? __pfx_kthread+0x10/0x10 [ 210.385193][ T12] ? rcu_is_watching+0x12/0xc0 [ 210.389943][ T12] ? __pfx_kthread+0x10/0x10 [ 210.394518][ T12] ret_from_fork+0x5d4/0x6f0 [ 210.399096][ T12] ? __pfx_kthread+0x10/0x10 [ 210.403667][ T12] ret_from_fork_asm+0x1a/0x30 [ 210.408425][ T12] [ 210.411627][ T12] Kernel Offset: disabled [ 210.415942][ T12] Rebooting in 86400 seconds..