last executing test programs: 11.002332495s ago: executing program 2 (id=249): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) mlockall(0x2) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0xc000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x480, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0xf000) 10.372045022s ago: executing program 2 (id=253): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) 10.057227355s ago: executing program 2 (id=255): unshare(0x6a040000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 10.006045589s ago: executing program 3 (id=256): mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x29}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x15a200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8000, 0x5, 0x0, 0x6, 0x6, r3}) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0x3, 0x0, 0x3501, 0x5, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) setgid(0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) fallocate(r6, 0x0, 0x0, 0x20000) mincore(&(0x7f0000000000/0x9000)=nil, 0x9000, &(0x7f0000001e00)=""/49) 9.133092426s ago: executing program 3 (id=260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x6, @loopback, 0xfffd}}, 0x0, 0x0, 0x35, 0x0, "cabdb20aa81b59a1959b8a7317b5d050a653e54f867c3a19a1fc02fcf196c853ed24581e6849ceb4f4147f3198fada46707176258fcd2a1ca2a6242e0ad5be9f8700"}, 0xd8) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) shutdown(r0, 0x1) 8.928026227s ago: executing program 3 (id=262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 8.397942767s ago: executing program 3 (id=263): process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}]}, 0x28}}, 0x4) 8.32179486s ago: executing program 3 (id=265): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f0000b87e"], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x56a0, 0x1f}, 0x2c) 7.731312276s ago: executing program 1 (id=266): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 7.417351548s ago: executing program 1 (id=267): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) 7.385125467s ago: executing program 0 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) close(0xffffffffffffffff) 7.158617366s ago: executing program 1 (id=270): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) io_setup(0x0, &(0x7f0000000280)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 7.094793935s ago: executing program 0 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 6.639885305s ago: executing program 4 (id=272): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86", 0x9}], 0x1}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) 6.553888417s ago: executing program 2 (id=273): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002380)=@delchain={0x24, 0x65, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x9, 0xffe0}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x10, 0x6, 0x5, {0x5, 0x10, "87912e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0xa}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x4, 0x2, {{0x20, 0x4, 0x0, 0x7, 0x80, 0x64, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, {[@rr={0x7, 0xf, 0x52, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xed, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty]}, @timestamp_prespec={0x44, 0x24, 0x70, 0x3, 0x6, [{@empty, 0x7ff}, {@broadcast, 0xc76b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x15, 0x1, 0x3, [{@broadcast, 0x3}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@empty, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x5, 0x3, 0x0, @loopback, @local, 0x40, 0x20, 0x3, 0x100}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xb, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x108, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20010004}, 0x8080) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r12 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r12, 0xffff) fcntl$addseals(r12, 0x409, 0x7) r13 = ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f00000002c0)={r12, 0x0, 0x0, 0x1000}) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r14}) 6.394011492s ago: executing program 3 (id=274): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80), 0x0, 0xc044) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="000000000000be28158c9f2a093f0000"], 0x10}}], 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x6, 0x0, @void, @value, @void, @value}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) truncate(&(0x7f0000000040)='./bus\x00', 0x8) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)=@ng={0x4, 0x11}, 0x2, 0x1) 6.376727815s ago: executing program 0 (id=275): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001a0001000000006d230000000a"], 0x44}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x1c, 0x18, 0x393, 0x70bd23, 0x3, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008094}, 0x37551b0f4cd409a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 6.266029326s ago: executing program 4 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x645e, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00000005c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.103926521s ago: executing program 1 (id=277): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x5, 0x8}, {0xff7f, 0x1, 0x3b76, 0x9}}}}, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000200)='~', 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 4.731081955s ago: executing program 0 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x420a0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000100)={{}, 0xc6}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f00000003c0)=0x7, 0x4) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0x7f, 0x20, 0x144, &(0x7f0000000780)}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa102af909fc8b000104ffffffff1b085c1124596c8e9f6992d22c338c3793574d498d9dc7ff"], 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.693832791s ago: executing program 4 (id=279): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd02, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000553000/0xa000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB], 0xf8}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000007f000014001a80100005800c000780080001"], 0x34}}, 0x0) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020400) 3.845353468s ago: executing program 1 (id=280): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000084112155000000000000109022400010000000009040000010300000905810300000cfd00"/54], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="e2", 0x1}], 0x1, 0x1) close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 3.544697531s ago: executing program 0 (id=281): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) 3.381931075s ago: executing program 4 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x8, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b193d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca41f80026d1a8554fe581b59ded130e04d528539f3d34fd7e3120715b88d64a02447045df87f9ea917de000000003edf72fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0xff, @empty, @mcast2, [], "1e520b4c951ee12e"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.714967405s ago: executing program 0 (id=283): unshare(0x6a040000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 2.714014345s ago: executing program 4 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.539065117s ago: executing program 2 (id=285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 783.228174ms ago: executing program 2 (id=286): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86", 0x9}], 0x1}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) 502.686613ms ago: executing program 4 (id=287): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) io_setup(0x0, &(0x7f0000000280)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 1 (id=288): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 45.565426][ T30] audit: type=1400 audit(1741734574.626:88): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 45.568545][ T5807] cgroup: Unknown subsys name 'net' [ 45.588243][ T30] audit: type=1400 audit(1741734574.626:89): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.615570][ T30] audit: type=1400 audit(1741734574.666:90): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.781346][ T5807] cgroup: Unknown subsys name 'cpuset' [ 45.788376][ T5807] cgroup: Unknown subsys name 'rlimit' [ 45.950686][ T30] audit: type=1400 audit(1741734575.016:91): avc: denied { setattr } for pid=5807 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.974100][ T30] audit: type=1400 audit(1741734575.016:92): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.001049][ T30] audit: type=1400 audit(1741734575.016:93): avc: denied { write } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.021593][ T30] audit: type=1400 audit(1741734575.016:94): avc: denied { read } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.042097][ T30] audit: type=1400 audit(1741734575.046:95): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 46.062302][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 46.067128][ T30] audit: type=1400 audit(1741734575.046:96): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 46.099317][ T30] audit: type=1400 audit(1741734575.046:97): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.905035][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.001832][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.014377][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.021721][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.029003][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.040260][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.047628][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.049611][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.054982][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.069538][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.069773][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.083546][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.084483][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 50.091123][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.098206][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.111782][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.112125][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 50.119767][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.133021][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.133210][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.140106][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 50.154581][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.154696][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 50.163978][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 50.169310][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.214603][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.224085][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 50.231786][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.238989][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 50.239787][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.257565][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.468211][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 50.491291][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 50.571620][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.579010][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.586693][ T5817] bridge_slave_0: entered allmulticast mode [ 50.593553][ T5817] bridge_slave_0: entered promiscuous mode [ 50.634135][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.641345][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.648483][ T5817] bridge_slave_1: entered allmulticast mode [ 50.655210][ T5817] bridge_slave_1: entered promiscuous mode [ 50.668486][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.675635][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.682896][ T5819] bridge_slave_0: entered allmulticast mode [ 50.689750][ T5819] bridge_slave_0: entered promiscuous mode [ 50.723608][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.732837][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.740076][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.747143][ T5819] bridge_slave_1: entered allmulticast mode [ 50.754006][ T5819] bridge_slave_1: entered promiscuous mode [ 50.760407][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 50.769030][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 50.781489][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.806461][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 50.829711][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.853735][ T5817] team0: Port device team_slave_0 added [ 50.866958][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.888210][ T5817] team0: Port device team_slave_1 added [ 50.926034][ T5819] team0: Port device team_slave_0 added [ 50.936882][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.944025][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.969940][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.997861][ T5819] team0: Port device team_slave_1 added [ 51.004533][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.012124][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.019238][ T5825] bridge_slave_0: entered allmulticast mode [ 51.025566][ T5825] bridge_slave_0: entered promiscuous mode [ 51.032572][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.039720][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.065666][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.093810][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.102870][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.110006][ T5825] bridge_slave_1: entered allmulticast mode [ 51.116322][ T5825] bridge_slave_1: entered promiscuous mode [ 51.142028][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.148966][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.176946][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.201950][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.213225][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.220374][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.227439][ T5818] bridge_slave_0: entered allmulticast mode [ 51.234220][ T5818] bridge_slave_0: entered promiscuous mode [ 51.240627][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.247677][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.255554][ T5826] bridge_slave_0: entered allmulticast mode [ 51.262019][ T5826] bridge_slave_0: entered promiscuous mode [ 51.268662][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.277882][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.304393][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.324892][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.334155][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.341743][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.348824][ T5818] bridge_slave_1: entered allmulticast mode [ 51.355273][ T5818] bridge_slave_1: entered promiscuous mode [ 51.361419][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.368455][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.375715][ T5826] bridge_slave_1: entered allmulticast mode [ 51.382096][ T5826] bridge_slave_1: entered promiscuous mode [ 51.425234][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.436977][ T5817] hsr_slave_0: entered promiscuous mode [ 51.443522][ T5817] hsr_slave_1: entered promiscuous mode [ 51.456515][ T5825] team0: Port device team_slave_0 added [ 51.469731][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.484003][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.498081][ T5825] team0: Port device team_slave_1 added [ 51.507206][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.523336][ T5819] hsr_slave_0: entered promiscuous mode [ 51.529846][ T5819] hsr_slave_1: entered promiscuous mode [ 51.535610][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.543379][ T5819] Cannot create hsr debugfs directory [ 51.577688][ T5826] team0: Port device team_slave_0 added [ 51.585176][ T5826] team0: Port device team_slave_1 added [ 51.606145][ T5818] team0: Port device team_slave_0 added [ 51.624890][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.632028][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.658673][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.671108][ T5818] team0: Port device team_slave_1 added [ 51.677025][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.684131][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.710067][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.730451][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.737396][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.763318][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.795915][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.802993][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.830319][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.843707][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.850976][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.876902][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.903579][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.910781][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.936761][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.986000][ T5825] hsr_slave_0: entered promiscuous mode [ 51.991998][ T5825] hsr_slave_1: entered promiscuous mode [ 51.997712][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.005936][ T5825] Cannot create hsr debugfs directory [ 52.020097][ T5826] hsr_slave_0: entered promiscuous mode [ 52.026079][ T5826] hsr_slave_1: entered promiscuous mode [ 52.032364][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.040081][ T5826] Cannot create hsr debugfs directory [ 52.095732][ T5818] hsr_slave_0: entered promiscuous mode [ 52.103874][ T5818] hsr_slave_1: entered promiscuous mode [ 52.109981][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.117537][ T5818] Cannot create hsr debugfs directory [ 52.194738][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.209995][ T5824] Bluetooth: hci2: command tx timeout [ 52.224195][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.251022][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.275323][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.289490][ T5824] Bluetooth: hci4: command tx timeout [ 52.295156][ T5824] Bluetooth: hci3: command tx timeout [ 52.300682][ T5829] Bluetooth: hci0: command tx timeout [ 52.306255][ T5829] Bluetooth: hci1: command tx timeout [ 52.332457][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.343680][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.352197][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.360777][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.371153][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.391859][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.401291][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.421608][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.435915][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.445882][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.454936][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.495978][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.561140][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.570118][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.585268][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.593334][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.603994][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.627129][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.659081][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.684965][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.703312][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.710636][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.721925][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.728972][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.737614][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.744662][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.761476][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.775955][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.783044][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.798578][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.825267][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.853940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.861023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.876933][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.891572][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.911402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.918487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.927123][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 52.927135][ T30] audit: type=1400 audit(1741734581.996:111): avc: denied { sys_module } for pid=5819 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.928302][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.961377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.983568][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.990689][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.093749][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.108332][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.133536][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.147607][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.162347][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.169422][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.178492][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.185589][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.218791][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.270806][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.294404][ T5819] veth0_vlan: entered promiscuous mode [ 53.323557][ T5819] veth1_vlan: entered promiscuous mode [ 53.378280][ T5817] veth0_vlan: entered promiscuous mode [ 53.386606][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.412619][ T5819] veth0_macvtap: entered promiscuous mode [ 53.431652][ T5819] veth1_macvtap: entered promiscuous mode [ 53.442142][ T5817] veth1_vlan: entered promiscuous mode [ 53.466523][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.513419][ T5817] veth0_macvtap: entered promiscuous mode [ 53.527748][ T5817] veth1_macvtap: entered promiscuous mode [ 53.539048][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.551134][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.560508][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.569728][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.578422][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.604885][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.628937][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.668883][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.683034][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.694755][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.704261][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.715157][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.726144][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.752774][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.765346][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.774348][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.785108][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.814546][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.832842][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.882242][ T5826] veth0_vlan: entered promiscuous mode [ 53.895891][ T5818] veth0_vlan: entered promiscuous mode [ 53.913511][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.917059][ T5826] veth1_vlan: entered promiscuous mode [ 53.931632][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.933271][ T5825] veth0_vlan: entered promiscuous mode [ 53.953176][ T5818] veth1_vlan: entered promiscuous mode [ 53.960517][ T5825] veth1_vlan: entered promiscuous mode [ 53.973031][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.988391][ T30] audit: type=1400 audit(1741734583.046:112): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.p28NJs/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 53.998228][ T5825] veth0_macvtap: entered promiscuous mode [ 54.033481][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.050962][ T30] audit: type=1400 audit(1741734583.046:113): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.083774][ T5818] veth0_macvtap: entered promiscuous mode [ 54.098176][ T30] audit: type=1400 audit(1741734583.046:114): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.p28NJs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.111911][ T5826] veth0_macvtap: entered promiscuous mode [ 54.130483][ T30] audit: type=1400 audit(1741734583.086:115): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.152957][ T30] audit: type=1400 audit(1741734583.086:116): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.p28NJs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.192594][ T5825] veth1_macvtap: entered promiscuous mode [ 54.192784][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.210544][ T5826] veth1_macvtap: entered promiscuous mode [ 54.219923][ T30] audit: type=1400 audit(1741734583.086:117): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.p28NJs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 54.250366][ T30] audit: type=1400 audit(1741734583.106:118): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.255921][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.270671][ T30] audit: type=1400 audit(1741734583.106:119): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.282502][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.313421][ T5829] Bluetooth: hci2: command tx timeout [ 54.318296][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.318852][ T30] audit: type=1400 audit(1741734583.106:120): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="gadgetfs" ino=6800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 54.329456][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.351857][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.369165][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.379285][ T5829] Bluetooth: hci1: command tx timeout [ 54.379298][ T5824] Bluetooth: hci3: command tx timeout [ 54.384681][ T5829] Bluetooth: hci4: command tx timeout [ 54.390179][ T5824] Bluetooth: hci0: command tx timeout [ 54.400096][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.413702][ T5818] veth1_macvtap: entered promiscuous mode [ 54.423680][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.435541][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.447020][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.458832][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.471432][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.506414][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.523308][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.536511][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.552908][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.564242][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.578216][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.594213][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.604976][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.620075][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.636722][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.648136][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.658131][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.670158][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.681493][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.072055][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.149005][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.162830][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.172774][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.194752][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.203881][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.212911][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.221948][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.256739][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.272829][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.284828][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.295511][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.305608][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.316241][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.330421][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.340905][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.352294][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.396036][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.443907][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.465292][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.656432][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.666357][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.676854][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.689274][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.699761][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.740447][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.767446][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.778330][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.792192][ T5916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7'. [ 55.801457][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.810408][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.895340][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.907990][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.969079][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.978311][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.419478][ T5824] Bluetooth: hci2: command tx timeout [ 56.449806][ T5824] Bluetooth: hci4: command tx timeout [ 56.455358][ T5824] Bluetooth: hci3: command tx timeout [ 56.461236][ T5824] Bluetooth: hci1: command tx timeout [ 56.462406][ T5822] Bluetooth: hci0: command tx timeout [ 56.509740][ T312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.517909][ T312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.543547][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.561253][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.728367][ T312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.766944][ T312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.896409][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.943484][ T3400] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.969404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.998660][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.099430][ T3400] usb 1-1: Using ep0 maxpacket: 16 [ 57.109650][ T3400] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.120951][ T3400] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.127618][ T3400] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 57.129451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.137347][ T3400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.227138][ T3400] usb 1-1: config 0 descriptor?? [ 57.293808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 57.869594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.930925][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 57.930939][ T30] audit: type=1400 audit(1741734586.996:167): avc: denied { read write } for pid=5952 comm="syz.1.13" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.967727][ T3400] usbhid 1-1:0.0: can't add hid device: -71 [ 57.968070][ T30] audit: type=1400 audit(1741734586.996:168): avc: denied { open } for pid=5952 comm="syz.1.13" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.022659][ T30] audit: type=1400 audit(1741734587.086:169): avc: denied { name_bind } for pid=5955 comm="syz.2.14" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.147054][ T3400] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 58.161290][ T3400] usb 1-1: USB disconnect, device number 2 [ 58.182882][ T30] audit: type=1400 audit(1741734587.246:170): avc: denied { create } for pid=5958 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.450580][ T5822] Bluetooth: hci2: command tx timeout [ 58.529310][ T5822] Bluetooth: hci0: command tx timeout [ 58.542017][ T5837] Bluetooth: hci4: command tx timeout [ 58.547589][ T5824] Bluetooth: hci3: command tx timeout [ 58.553161][ T5822] Bluetooth: hci1: command tx timeout [ 59.034533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 59.072173][ T30] audit: type=1400 audit(1741734587.316:171): avc: denied { map_read map_write } for pid=5952 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.206696][ T30] audit: type=1400 audit(1741734587.756:172): avc: denied { execute } for pid=5951 comm="syz.4.12" path="/3/bus" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.247041][ T30] audit: type=1400 audit(1741734587.826:173): avc: denied { create } for pid=5958 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.269738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.299479][ T5973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18'. [ 59.308427][ T30] audit: type=1400 audit(1741734587.996:174): avc: denied { write } for pid=5951 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.359257][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.417217][ T30] audit: type=1400 audit(1741734588.006:175): avc: denied { read } for pid=5951 comm="syz.4.12" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.439829][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.447189][ T30] audit: type=1400 audit(1741734588.016:176): avc: denied { open } for pid=5951 comm="syz.4.12" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.657859][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 60.279401][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 60.297431][ T5906] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 60.308673][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.442172][ T5906] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 60.469396][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.495701][ T5906] usb 2-1: config 0 descriptor?? [ 60.669450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.678673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.775054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.099234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 61.200501][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.255248][ T5969] bond0: (slave rose0): Enslaving as an active interface with an up link [ 61.351576][ T5906] usb 2-1: string descriptor 0 read error: -71 [ 61.380291][ T5906] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 61.447697][ T5906] usb 2-1: USB disconnect, device number 2 [ 62.423392][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 63.168801][ T973] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.172122][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 63.172133][ T30] audit: type=1400 audit(1741734592.236:204): avc: denied { remove_name } for pid=6021 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=1916 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.378070][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 63.433362][ T973] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.485466][ T973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.515728][ T973] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 63.525170][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.596493][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.641832][ T973] usb 4-1: config 0 descriptor?? [ 63.672065][ T30] audit: type=1400 audit(1741734592.736:205): avc: denied { read write } for pid=6045 comm="syz.1.33" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.739735][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 63.756598][ T30] audit: type=1400 audit(1741734592.736:206): avc: denied { open } for pid=6045 comm="syz.1.33" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.756904][ T5874] usb 1-1: no configurations [ 63.838386][ T30] audit: type=1400 audit(1741734592.816:207): avc: denied { getattr } for pid=6048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1751 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.230412][ T30] audit: type=1400 audit(1741734592.866:208): avc: denied { create } for pid=6050 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.498322][ T30] audit: type=1400 audit(1741734592.866:209): avc: denied { read write } for pid=6050 comm="syz.4.34" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.676953][ T5874] usb 1-1: can't read configurations, error -22 [ 64.686931][ T30] audit: type=1400 audit(1741734592.866:210): avc: denied { open } for pid=6050 comm="syz.4.34" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.711801][ T30] audit: type=1400 audit(1741734592.936:211): avc: denied { setopt } for pid=6050 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.731163][ T30] audit: type=1400 audit(1741734592.936:212): avc: denied { bind } for pid=6050 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.750797][ T30] audit: type=1400 audit(1741734592.936:213): avc: denied { name_bind } for pid=6050 comm="syz.4.34" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 64.815740][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 65.109296][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 65.116238][ T5874] usb 1-1: no configurations [ 65.121130][ T5874] usb 1-1: can't read configurations, error -22 [ 65.127830][ T5874] usb usb1-port1: attempt power cycle [ 65.461185][ T973] usbhid 4-1:0.0: can't add hid device: -71 [ 65.467176][ T973] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.780164][ T973] usb 4-1: USB disconnect, device number 2 [ 65.810073][ T5874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.028928][ T5874] usb 1-1: device not accepting address 5, error -71 [ 66.360987][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 68.461336][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 68.461351][ T30] audit: type=1400 audit(1741734597.496:236): avc: denied { bind } for pid=6102 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.944561][ T30] audit: type=1400 audit(1741734598.006:237): avc: denied { create } for pid=6112 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.969811][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 69.249265][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.283735][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 70.349081][ T5870] usb 3-1: no configurations [ 70.359229][ T5870] usb 3-1: can't read configurations, error -22 [ 70.549305][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.022567][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.029025][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.048770][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 71.067444][ T5870] usb 3-1: no configurations [ 71.099258][ T5870] usb 3-1: can't read configurations, error -22 [ 71.123450][ T5870] usb usb3-port1: attempt power cycle [ 71.340261][ T30] audit: type=1400 audit(1741734600.406:238): avc: denied { create } for pid=6131 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.404379][ T30] audit: type=1400 audit(1741734600.466:239): avc: denied { setopt } for pid=6131 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.519297][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.814863][ T30] audit: type=1400 audit(1741734600.876:240): avc: denied { audit_write } for pid=6134 comm="syz.2.54" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.879395][ T5870] usb 3-1: device not accepting address 4, error -71 [ 72.060022][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 72.826127][ T30] audit: type=1400 audit(1741734601.686:241): avc: denied { execute } for pid=6143 comm="syz.3.57" path="/7/bus" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.848027][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.111028][ T30] audit: type=1400 audit(1741734602.176:242): avc: denied { unlink } for pid=6148 comm="syz.4.59" name="#1" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.132854][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.148927][ T30] audit: type=1400 audit(1741734602.206:243): avc: denied { mount } for pid=6148 comm="syz.4.59" name="/" dev="overlay" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.815052][ T30] audit: type=1400 audit(1741734602.276:244): avc: denied { accept } for pid=6155 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.539374][ T973] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.137970][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 76.144497][ T10] cfg80211: failed to load regulatory.db [ 76.173745][ T973] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 76.187786][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.222715][ T973] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 76.233045][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.274535][ T973] usb 2-1: config 0 descriptor?? [ 76.840233][ T973] usb 2-1: string descriptor 0 read error: -71 [ 76.858335][ T973] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 76.897542][ T973] usb 2-1: USB disconnect, device number 3 [ 77.149832][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 77.222887][ T6200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.417414][ T30] audit: type=1400 audit(1741734606.476:245): avc: denied { read } for pid=6201 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.449271][ T30] audit: type=1400 audit(1741734606.476:246): avc: denied { write } for pid=6201 comm="syz.2.76" path="socket:[8694]" dev="sockfs" ino=8694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.831471][ T30] audit: type=1400 audit(1741734606.836:247): avc: denied { mount } for pid=6209 comm="syz.1.79" name="/" dev="autofs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.934552][ T30] audit: type=1400 audit(1741734606.836:248): avc: denied { mount } for pid=6211 comm="syz.4.78" name="/" dev="autofs" ino=8711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.958074][ T30] audit: type=1400 audit(1741734606.916:249): avc: denied { setopt } for pid=6209 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.120304][ T30] audit: type=1400 audit(1741734607.066:250): avc: denied { connect } for pid=6214 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.770061][ T30] audit: type=1400 audit(1741734607.826:251): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 79.071203][ T30] audit: type=1400 audit(1741734608.126:252): avc: denied { create } for pid=6226 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.758422][ T30] audit: type=1400 audit(1741734608.336:253): avc: denied { bind } for pid=6226 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.851790][ T30] audit: type=1400 audit(1741734608.336:254): avc: denied { write } for pid=6226 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.694844][ T30] audit: type=1400 audit(1741734609.756:255): avc: denied { create } for pid=6256 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 81.121873][ T30] audit: type=1400 audit(1741734610.186:256): avc: denied { create } for pid=6256 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.637272][ T30] audit: type=1400 audit(1741734610.696:257): avc: denied { bind } for pid=6270 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.645682][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 81.665783][ T30] audit: type=1400 audit(1741734610.706:258): avc: denied { connect } for pid=6270 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.747756][ T30] audit: type=1400 audit(1741734610.706:259): avc: denied { write } for pid=6270 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.797858][ T30] audit: type=1400 audit(1741734610.786:260): avc: denied { create } for pid=6267 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.852035][ T30] audit: type=1400 audit(1741734610.786:261): avc: denied { setopt } for pid=6267 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.697790][ T6298] fuse: Bad value for 'group_id' [ 83.702974][ T6298] fuse: Bad value for 'group_id' [ 84.316547][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'. [ 84.467242][ T6304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6304 comm=syz.2.98 [ 84.479618][ T30] audit: type=1400 audit(1741734613.526:262): avc: denied { ioctl } for pid=6288 comm="syz.2.98" path="socket:[9674]" dev="sockfs" ino=9674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.941062][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 85.230767][ T30] audit: type=1400 audit(1741734614.296:263): avc: denied { setopt } for pid=6313 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.465012][ T30] audit: type=1400 audit(1741734614.346:264): avc: denied { write } for pid=6313 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.656713][ T30] audit: type=1400 audit(1741734614.346:265): avc: denied { read } for pid=6313 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.794399][ T5871] IPVS: starting estimator thread 0... [ 87.449378][ T973] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.480880][ T6330] IPVS: using max 30 ests per chain, 72000 per kthread [ 87.481423][ T30] audit: type=1400 audit(1741734616.546:266): avc: denied { create } for pid=6332 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.624595][ T973] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 87.643952][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.687278][ T973] usb 5-1: config 0 descriptor?? [ 87.858295][ T6338] xt_hashlimit: size too large, truncated to 1048576 [ 88.060685][ T6336] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 88.067475][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.075594][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 88.087744][ T30] audit: type=1400 audit(1741734616.916:267): avc: denied { ioctl } for pid=6332 comm="syz.1.109" path="socket:[8852]" dev="sockfs" ino=8852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.324188][ T6337] vhci_hcd: connection closed [ 88.330019][ T312] vhci_hcd: stop threads [ 88.390259][ T312] vhci_hcd: release socket [ 88.394741][ T312] vhci_hcd: disconnect device [ 88.483479][ T973] usbhid 5-1:0.0: can't add hid device: -71 [ 88.492257][ T973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 88.533545][ T973] usb 5-1: USB disconnect, device number 2 [ 89.263578][ T30] audit: type=1400 audit(1741734618.316:268): avc: denied { ioctl } for pid=6353 comm="syz.0.112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9814 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.297683][ T6358] fuse: Bad value for 'group_id' [ 89.308334][ T6358] fuse: Bad value for 'group_id' [ 89.316689][ T30] audit: type=1400 audit(1741734618.376:269): avc: denied { read } for pid=6353 comm="syz.0.112" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.777014][ T30] audit: type=1400 audit(1741734618.376:270): avc: denied { open } for pid=6353 comm="syz.0.112" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.255331][ T30] audit: type=1400 audit(1741734619.276:271): avc: denied { write } for pid=6365 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.892233][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 91.139316][ T5870] IPVS: starting estimator thread 0... [ 91.869389][ T6376] IPVS: using max 29 ests per chain, 69600 per kthread [ 92.306275][ T30] audit: type=1400 audit(1741734621.256:272): avc: denied { wake_alarm } for pid=6390 comm="syz.4.121" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.742153][ T6401] capability: warning: `syz.1.124' uses deprecated v2 capabilities in a way that may be insecure [ 93.892092][ T30] audit: type=1400 audit(1741734622.806:273): avc: denied { write } for pid=6397 comm="syz.1.124" path="socket:[9898]" dev="sockfs" ino=9898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.219589][ T30] audit: type=1400 audit(1741734624.236:274): avc: denied { map } for pid=6413 comm="syz.1.127" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.662335][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 96.101869][ T30] audit: type=1400 audit(1741734624.236:275): avc: denied { execute } for pid=6413 comm="syz.1.127" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.391952][ T30] audit: type=1400 audit(1741734625.456:276): avc: denied { listen } for pid=6424 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.175177][ T30] audit: type=1326 audit(1741734625.756:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.3.130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee66d8d169 code=0x0 [ 97.210710][ T6431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.216872][ T6431] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 97.372645][ T6431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.378572][ T6431] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 97.475786][ T6431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.481752][ T6431] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 97.493237][ T6431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.499130][ T6431] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 97.508826][ T6431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 97.514747][ T6431] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 98.609260][ T30] audit: type=1326 audit(1741734627.666:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee66d8d169 code=0x0 [ 98.697497][ T6450] QAT: Device 198 not found [ 98.946473][ T30] audit: type=1400 audit(1741734627.926:279): avc: denied { ioctl } for pid=6443 comm="syz.0.137" path="socket:[10052]" dev="sockfs" ino=10052 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.597833][ T30] audit: type=1400 audit(1741734628.656:280): avc: denied { create } for pid=6452 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.683431][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 101.032523][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 101.863452][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 102.660808][ T30] audit: type=1326 audit(1741734631.226:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.4.144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f207d58d169 code=0x0 [ 102.735963][ T6490] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 104.059227][ T30] audit: type=1400 audit(1741734633.106:282): avc: denied { connect } for pid=6496 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.124234][ T30] audit: type=1400 audit(1741734633.166:283): avc: denied { write } for pid=6499 comm="syz.1.150" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.499451][ T5871] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.539280][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.876316][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 106.948325][ T30] audit: type=1400 audit(1741734636.006:284): avc: denied { mounton } for pid=6511 comm="syz.4.154" path="/34/file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.274034][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 107.693265][ T5870] usb 4-1: device descriptor read/all, error -71 [ 107.739370][ T30] audit: type=1400 audit(1741734636.266:285): avc: denied { create } for pid=6512 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.758877][ T30] audit: type=1400 audit(1741734636.276:286): avc: denied { connect } for pid=6512 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.778816][ T30] audit: type=1400 audit(1741734636.276:287): avc: denied { write } for pid=6512 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.881525][ T5871] usb 2-1: device descriptor read/all, error -71 [ 108.753365][ T5874] IPVS: starting estimator thread 0... [ 108.900040][ T6534] IPVS: using max 26 ests per chain, 62400 per kthread [ 109.162995][ T30] audit: type=1400 audit(1741734638.226:288): avc: denied { setopt } for pid=6537 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.920839][ T5822] block nbd4: Receive control failed (result -32) [ 109.921114][ T6539] block nbd4: shutting down sockets [ 110.436667][ T973] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.191153][ T973] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 111.210393][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.221372][ T973] usb 5-1: config 0 descriptor?? [ 111.814226][ T973] uclogic 0003:5543:0004.0001: item fetching failed at offset 2/5 [ 111.824046][ T973] uclogic 0003:5543:0004.0001: parse failed [ 111.835601][ T973] uclogic 0003:5543:0004.0001: probe with driver uclogic failed with error -22 [ 111.867667][ T30] audit: type=1400 audit(1741734640.926:289): avc: denied { ioctl } for pid=6569 comm="syz.3.173" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.221628][ T5874] usb 5-1: USB disconnect, device number 3 [ 112.271304][ T30] audit: type=1400 audit(1741734641.306:290): avc: denied { append } for pid=6576 comm="syz.0.175" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.294841][ T973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.471841][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 112.481483][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 112.502939][ T973] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.032983][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.045116][ T973] usb 4-1: Product: syz [ 113.050115][ T973] usb 4-1: Manufacturer: syz [ 113.054858][ T973] usb 4-1: SerialNumber: syz [ 113.061356][ T973] usb 4-1: config 0 descriptor?? [ 113.310856][ T26] usb 4-1: USB disconnect, device number 5 [ 116.523927][ T30] audit: type=1400 audit(1741734645.136:291): avc: denied { connect } for pid=6612 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.552346][ T973] libceph: connect (1)[c::]:6789 error -101 [ 116.558642][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 116.566644][ T30] audit: type=1400 audit(1741734645.146:292): avc: denied { shutdown } for pid=6612 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.712956][ T6620] ceph: No mds server is up or the cluster is laggy [ 116.831458][ T974] libceph: connect (1)[c::]:6789 error -101 [ 116.837494][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 118.162719][ T30] audit: type=1326 audit(1741734646.536:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f207d58d169 code=0x0 [ 118.214495][ T6638] netlink: 68 bytes leftover after parsing attributes in process `syz.0.191'. [ 118.569257][ T30] audit: type=1400 audit(1741734647.276:294): avc: denied { nlmsg_write } for pid=6630 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.719126][ T6633] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 118.719851][ T6626] mkiss: ax0: crc mode is auto. [ 119.310620][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.518688][ T30] audit: type=1400 audit(1741734648.576:295): avc: denied { mount } for pid=6650 comm="syz.0.192" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 119.729236][ T30] audit: type=1400 audit(1741734648.616:296): avc: denied { create } for pid=6652 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.324713][ T30] audit: type=1400 audit(1741734648.646:297): avc: denied { ioctl } for pid=6625 comm="syz.2.190" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.930594][ T6666] netlink: 256 bytes leftover after parsing attributes in process `syz.4.194'. [ 120.939817][ T6666] netlink: 'syz.4.194': attribute type 9 has an invalid length. [ 120.977839][ T6666] NILFS (nullb0): couldn't find nilfs on the device [ 121.351122][ T5871] usb 3-1: device not accepting address 6, error -71 [ 121.400867][ T30] audit: type=1400 audit(1741734650.456:298): avc: denied { read } for pid=6660 comm="syz.1.195" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.429309][ T6661] QAT: Device 198 not found [ 121.434016][ T30] audit: type=1400 audit(1741734650.496:299): avc: denied { open } for pid=6660 comm="syz.1.195" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.140598][ T30] audit: type=1400 audit(1741734651.176:300): avc: denied { write } for pid=6669 comm="syz.2.198" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.252608][ T6690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.632603][ T30] audit: type=1400 audit(1741734654.666:301): avc: denied { ioctl } for pid=6708 comm="syz.3.208" path="socket:[10518]" dev="sockfs" ino=10518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.672826][ T6701] QAT: Device 198 not found [ 126.089586][ T52] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.709385][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 127.789073][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 127.833528][ T52] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.961226][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.972390][ T52] usb 3-1: Product: syz [ 127.976950][ T52] usb 3-1: Manufacturer: syz [ 127.981956][ T52] usb 3-1: SerialNumber: syz [ 127.990586][ T52] usb 3-1: config 0 descriptor?? [ 128.537096][ T30] audit: type=1326 audit(1741734657.386:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.1.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3925f8d169 code=0x0 [ 128.610472][ T5874] usb 3-1: USB disconnect, device number 8 [ 132.486941][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.493778][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.264613][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.565272][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 134.592385][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.599150][ T5874] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 134.642477][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.023293][ T5874] usb 2-1: config 0 descriptor?? [ 135.061949][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 135.173019][ T6776] QAT: Device 198 not found [ 135.318223][ T30] audit: type=1400 audit(1741734664.366:303): avc: denied { bind } for pid=6763 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.611094][ T5874] gspca_sn9c2028: read1 error -71 [ 135.621308][ T5874] gspca_sn9c2028: read1 error -71 [ 135.630100][ T5874] gspca_sn9c2028: read1 error -71 [ 135.641163][ T5874] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 135.814052][ T5874] usb 2-1: USB disconnect, device number 6 [ 138.349951][ T6812] block nbd4: Device being setup by another task [ 138.597952][ T5822] block nbd4: Receive control failed (result -32) [ 138.607266][ T5822] block nbd4: Receive control failed (result -32) [ 139.200113][ T6805] block nbd4: shutting down sockets [ 139.567864][ T30] audit: type=1400 audit(1741734668.596:304): avc: denied { name_bind } for pid=6823 comm="syz.0.242" src=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 140.734544][ T6835] QAT: Device 198 not found [ 141.328811][ T6842] loop6: detected capacity change from 0 to 64 [ 141.424087][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.433348][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.466204][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.475372][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.490469][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.499620][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.517942][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.527082][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.538936][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.548157][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.613481][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.622663][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.637720][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80000 phys_seg 8 prio class 0 [ 141.647255][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.668584][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.677752][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.685649][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.694800][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 141.703042][ T6842] ldm_validate_partition_table(): Disk read failed. [ 141.729340][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.738459][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 141.773074][ T6842] Dev loop6: unable to read RDB block 0 [ 141.838818][ T6842] loop6: unable to read partition table [ 141.877557][ T6842] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 141.974428][ T5195] ldm_validate_partition_table(): Disk read failed. [ 142.019957][ T5195] Dev loop6: unable to read RDB block 0 [ 142.026369][ T5195] loop6: unable to read partition table [ 142.114771][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 142.149431][ T6851] : entered promiscuous mode [ 142.259608][ T30] audit: type=1400 audit(1741734671.296:305): avc: denied { append } for pid=6847 comm="syz.2.249" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.282777][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.459414][ T30] audit: type=1400 audit(1741734671.446:306): avc: denied { mount } for pid=6847 comm="syz.2.249" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 142.481204][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.523330][ T30] audit: type=1400 audit(1741734671.496:307): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.489375][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.539458][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 143.561041][ T5195] ldm_validate_partition_table(): Disk read failed. [ 143.570807][ T5195] Dev loop6: unable to read RDB block 0 [ 143.583448][ T5195] loop6: unable to read partition table [ 143.709576][ T26] usb 3-1: device descriptor read/64, error -32 [ 143.959231][ T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.228243][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 144.244696][ T26] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.266159][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.285210][ T26] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 144.305436][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.320330][ T26] usb 3-1: config 0 descriptor?? [ 144.364900][ T6885] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[6885] [ 144.840754][ T6895] syz.4.264 uses obsolete (PF_INET,SOCK_PACKET) [ 146.149873][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 146.155865][ T26] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.170099][ T5195] ldm_validate_partition_table(): Disk read failed. [ 146.178917][ T5195] Dev loop6: unable to read RDB block 0 [ 146.183169][ T26] usb 3-1: USB disconnect, device number 10 [ 146.226344][ T5195] loop6: unable to read partition table [ 146.379994][ T30] audit: type=1400 audit(1741734675.446:308): avc: denied { sys_module } for pid=6910 comm="syz.4.272" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 146.969324][ T6930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.275'. [ 147.669263][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.705409][ T30] audit: type=1400 audit(1741734676.766:309): avc: denied { mount } for pid=6923 comm="syz.0.275" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 147.727829][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.911609][ T30] audit: type=1400 audit(1741734676.766:310): avc: denied { search } for pid=6923 comm="syz.0.275" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.972714][ T30] audit: type=1400 audit(1741734676.766:311): avc: denied { read } for pid=6923 comm="syz.0.275" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.994453][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.004929][ T30] audit: type=1400 audit(1741734676.766:312): avc: denied { open } for pid=6923 comm="syz.0.275" path="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.077985][ T26] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 148.126664][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.226885][ T26] usb 3-1: config 0 descriptor?? [ 148.760179][ T6940] QAT: Device 198 not found [ 149.167466][ T26] uclogic 0003:5543:0004.0002: item fetching failed at offset 2/5 [ 149.178682][ T26] uclogic 0003:5543:0004.0002: parse failed [ 149.185382][ T26] uclogic 0003:5543:0004.0002: probe with driver uclogic failed with error -22 [ 149.430150][ T5906] usb 3-1: USB disconnect, device number 11 [ 149.658032][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.780982][ C1] blk_print_req_error: 122 callbacks suppressed [ 149.780999][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 149.801358][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.810493][ C1] buffer_io_error: 117 callbacks suppressed [ 149.810501][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 149.835948][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.845067][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.883426][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.892565][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 149.905255][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.914413][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.930190][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.939315][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.965381][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.974523][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.982875][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.992067][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.010349][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.019525][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.028507][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.037637][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.045747][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.071746][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 150.106428][ T26] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 150.114263][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.138289][ T5195] ldm_validate_partition_table(): Disk read failed. [ 150.146714][ T5195] Dev loop6: unable to read RDB block 0 [ 150.159391][ T26] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 150.171598][ T6960] vlan2: entered allmulticast mode [ 150.179709][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.195905][ T30] audit: type=1400 audit(1741734679.236:313): avc: denied { rename } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.209105][ T6960] geneve0: entered allmulticast mode [ 150.224115][ T5195] loop6: unable to read partition table [ 150.224138][ T30] audit: type=1400 audit(1741734679.236:314): avc: denied { unlink } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.231224][ T26] usb 2-1: config 0 descriptor?? [ 150.260691][ T30] audit: type=1400 audit(1741734679.236:315): avc: denied { create } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.284633][ T6960] bridge0: port 3(vlan2) entered blocking state [ 150.284666][ T6960] bridge0: port 3(vlan2) entered disabled state [ 150.285168][ T6960] vlan2: entered promiscuous mode [ 150.285178][ T6960] geneve0: entered promiscuous mode [ 150.285460][ T6960] bridge0: port 3(vlan2) entered blocking state [ 150.285523][ T6960] bridge0: port 3(vlan2) entered forwarding state [ 150.415858][ T6960] bridge_slave_0: left allmulticast mode [ 150.424213][ T6960] bridge_slave_0: left promiscuous mode [ 150.431979][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.457693][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.500995][ T6960] bridge_slave_1: left allmulticast mode [ 150.522119][ T6960] bridge_slave_1: left promiscuous mode [ 150.531204][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.647194][ T5870] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.487993][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.064542][ T6960] bond0: (slave bond_slave_0): Releasing backup interface [ 152.108103][ T6960] bond0: (slave bond_slave_1): Releasing backup interface [ 152.131825][ T6960] team0: Port device team_slave_0 removed [ 152.144559][ T6960] team0: Port device team_slave_1 removed [ 152.149227][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 152.151956][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.156724][ T5870] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.163457][ T6960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.182455][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.185594][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.189127][ T5870] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 152.197097][ T6960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.216172][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.235358][ T5870] usb 1-1: config 0 descriptor?? [ 152.239557][ T6960] vlan2: left promiscuous mode [ 152.245234][ T6960] geneve0: left promiscuous mode [ 152.254956][ T6960] bridge0: port 3(vlan2) entered disabled state [ 152.279384][ T26] usb 2-1: string descriptor 0 read error: -71 [ 152.287272][ T26] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 152.355860][ T26] usb 2-1: USB disconnect, device number 7 [ 152.677445][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 152.687298][ T5870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.709641][ T5870] usb 1-1: USB disconnect, device number 7 [ 152.837167][ T6976] [ 152.839491][ T6976] ====================================================== [ 152.846474][ T6976] WARNING: possible circular locking dependency detected [ 152.853458][ T6976] 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 Not tainted [ 152.860537][ T6976] ------------------------------------------------------ [ 152.867533][ T6976] syz.1.288/6976 is trying to acquire lock: [ 152.873392][ T6976] ffffffff90149b38 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x1a/0x290 [ 152.882772][ T6976] [ 152.882772][ T6976] but task is already holding lock: [ 152.890110][ T6976] ffff888036246170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2be0 [ 152.899426][ T6976] [ 152.899426][ T6976] which lock already depends on the new lock. [ 152.899426][ T6976] [ 152.909796][ T6976] [ 152.909796][ T6976] the existing dependency chain (in reverse order) is: [ 152.918777][ T6976] [ 152.918777][ T6976] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 152.926733][ T6976] _raw_spin_lock_bh+0x33/0x40 [ 152.931995][ T6976] nr_rt_device_down+0x188/0x7f0 [ 152.937436][ T6976] nr_device_event+0x126/0x170 [ 152.942694][ T6976] notifier_call_chain+0xb7/0x410 [ 152.948215][ T6976] call_netdevice_notifiers_info+0xbe/0x140 [ 152.954607][ T6976] dev_close_many+0x333/0x6a0 [ 152.959793][ T6976] dev_close+0x181/0x230 [ 152.964528][ T6976] bpq_device_event+0x820/0xaf0 [ 152.969871][ T6976] notifier_call_chain+0xb7/0x410 [ 152.975389][ T6976] call_netdevice_notifiers_info+0xbe/0x140 [ 152.981775][ T6976] dev_close_many+0x333/0x6a0 [ 152.986947][ T6976] dev_close+0x181/0x230 [ 152.991682][ T6976] bond_enslave+0x1f67/0x6040 [ 152.996855][ T6976] bond_do_ioctl+0x60e/0x6d0 [ 153.001941][ T6976] dev_ifsioc+0x1f8/0x10d0 [ 153.006856][ T6976] dev_ioctl+0x224/0x10c0 [ 153.011680][ T6976] sock_do_ioctl+0x19e/0x280 [ 153.016784][ T6976] sock_ioctl+0x228/0x6c0 [ 153.021623][ T6976] __x64_sys_ioctl+0x190/0x200 [ 153.026892][ T6976] do_syscall_64+0xcd/0x250 [ 153.031918][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.038308][ T6976] [ 153.038308][ T6976] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 153.046094][ T6976] _raw_spin_lock_bh+0x33/0x40 [ 153.051354][ T6976] nr_rt_device_down+0xd5/0x7f0 [ 153.056704][ T6976] nr_device_event+0x126/0x170 [ 153.061970][ T6976] notifier_call_chain+0xb7/0x410 [ 153.067494][ T6976] call_netdevice_notifiers_info+0xbe/0x140 [ 153.073884][ T6976] dev_close_many+0x333/0x6a0 [ 153.079062][ T6976] dev_close+0x181/0x230 [ 153.083800][ T6976] bpq_device_event+0x820/0xaf0 [ 153.089151][ T6976] notifier_call_chain+0xb7/0x410 [ 153.094684][ T6976] call_netdevice_notifiers_info+0xbe/0x140 [ 153.101069][ T6976] dev_close_many+0x333/0x6a0 [ 153.106246][ T6976] dev_close+0x181/0x230 [ 153.110980][ T6976] bond_enslave+0x1f67/0x6040 [ 153.116153][ T6976] bond_do_ioctl+0x60e/0x6d0 [ 153.121237][ T6976] dev_ifsioc+0x1f8/0x10d0 [ 153.126145][ T6976] dev_ioctl+0x224/0x10c0 [ 153.130968][ T6976] sock_do_ioctl+0x19e/0x280 [ 153.136050][ T6976] sock_ioctl+0x228/0x6c0 [ 153.140876][ T6976] __x64_sys_ioctl+0x190/0x200 [ 153.146146][ T6976] do_syscall_64+0xcd/0x250 [ 153.151145][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.157534][ T6976] [ 153.157534][ T6976] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 153.165413][ T6976] __lock_acquire+0x249e/0x3c40 [ 153.170775][ T6976] lock_acquire.part.0+0x11b/0x380 [ 153.176396][ T6976] _raw_spin_lock_bh+0x33/0x40 [ 153.181658][ T6976] nr_remove_neigh+0x1a/0x290 [ 153.186846][ T6976] nr_add_node+0x23d1/0x2be0 [ 153.191933][ T6976] nr_rt_ioctl+0x126e/0x29e0 [ 153.197019][ T6976] nr_ioctl+0x19a/0x2e0 [ 153.201674][ T6976] sock_do_ioctl+0x116/0x280 [ 153.206757][ T6976] sock_ioctl+0x228/0x6c0 [ 153.211589][ T6976] __x64_sys_ioctl+0x190/0x200 [ 153.216859][ T6976] do_syscall_64+0xcd/0x250 [ 153.221859][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.228247][ T6976] [ 153.228247][ T6976] other info that might help us debug this: [ 153.228247][ T6976] [ 153.238445][ T6976] Chain exists of: [ 153.238445][ T6976] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 153.238445][ T6976] [ 153.252233][ T6976] Possible unsafe locking scenario: [ 153.252233][ T6976] [ 153.259651][ T6976] CPU0 CPU1 [ 153.264986][ T6976] ---- ---- [ 153.270320][ T6976] lock(&nr_node->node_lock); [ 153.275055][ T6976] lock(nr_node_list_lock); [ 153.282146][ T6976] lock(&nr_node->node_lock); [ 153.289405][ T6976] lock(nr_neigh_list_lock); [ 153.294064][ T6976] [ 153.294064][ T6976] *** DEADLOCK *** [ 153.294064][ T6976] [ 153.302176][ T6976] 1 lock held by syz.1.288/6976: [ 153.307080][ T6976] #0: ffff888036246170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2be0 [ 153.316807][ T6976] [ 153.316807][ T6976] stack backtrace: [ 153.322669][ T6976] CPU: 0 UID: 0 PID: 6976 Comm: syz.1.288 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 153.322682][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.322688][ T6976] Call Trace: [ 153.322692][ T6976] [ 153.322695][ T6976] dump_stack_lvl+0x116/0x1f0 [ 153.322712][ T6976] print_circular_bug+0x490/0x760 [ 153.322727][ T6976] check_noncircular+0x31a/0x400 [ 153.322740][ T6976] ? __pfx_check_noncircular+0x10/0x10 [ 153.322754][ T6976] ? lockdep_lock+0xc6/0x200 [ 153.322764][ T6976] ? __pfx_lockdep_lock+0x10/0x10 [ 153.322774][ T6976] ? kmemdup_noprof+0x29/0x60 [ 153.322788][ T6976] ? nr_ioctl+0x19a/0x2e0 [ 153.322800][ T6976] __lock_acquire+0x249e/0x3c40 [ 153.322816][ T6976] ? __pfx___lock_acquire+0x10/0x10 [ 153.322829][ T6976] ? __pfx___lock_acquire+0x10/0x10 [ 153.322843][ T6976] lock_acquire.part.0+0x11b/0x380 [ 153.322857][ T6976] ? nr_remove_neigh+0x1a/0x290 [ 153.322871][ T6976] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 153.322884][ T6976] ? rcu_is_watching+0x12/0xc0 [ 153.322894][ T6976] ? trace_lock_acquire+0x14e/0x1f0 [ 153.322905][ T6976] ? rcu_is_watching+0x12/0xc0 [ 153.322914][ T6976] ? nr_remove_neigh+0x1a/0x290 [ 153.322928][ T6976] ? lock_acquire+0x2f/0xb0 [ 153.322940][ T6976] ? nr_remove_neigh+0x1a/0x290 [ 153.322954][ T6976] _raw_spin_lock_bh+0x33/0x40 [ 153.322965][ T6976] ? nr_remove_neigh+0x1a/0x290 [ 153.322978][ T6976] nr_remove_neigh+0x1a/0x290 [ 153.322992][ T6976] nr_add_node+0x23d1/0x2be0 [ 153.323007][ T6976] nr_rt_ioctl+0x126e/0x29e0 [ 153.323022][ T6976] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 153.323040][ T6976] ? bpf_lsm_capable+0x9/0x10 [ 153.323052][ T6976] ? security_capable+0x7e/0x260 [ 153.323064][ T6976] nr_ioctl+0x19a/0x2e0 [ 153.323075][ T6976] sock_do_ioctl+0x116/0x280 [ 153.323086][ T6976] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.323097][ T6976] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 153.323113][ T6976] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 153.323129][ T6976] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 153.323146][ T6976] sock_ioctl+0x228/0x6c0 [ 153.323156][ T6976] ? __pfx_sock_ioctl+0x10/0x10 [ 153.323168][ T6976] ? selinux_file_ioctl+0x180/0x270 [ 153.323182][ T6976] ? selinux_file_ioctl+0xb4/0x270 [ 153.323197][ T6976] ? __pfx_sock_ioctl+0x10/0x10 [ 153.323208][ T6976] __x64_sys_ioctl+0x190/0x200 [ 153.323226][ T6976] do_syscall_64+0xcd/0x250 [ 153.323239][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.323252][ T6976] RIP: 0033:0x7f3925f8d169 [ 153.323260][ T6976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.323269][ T6976] RSP: 002b:00007f3926ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.323278][ T6976] RAX: ffffffffffffffda RBX: 00007f39261a5fa0 RCX: 00007f3925f8d169 [ 153.323284][ T6976] RDX: 0000400000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 153.323290][ T6976] RBP: 00007f392600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.323295][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.323300][ T6976] R13: 0000000000000000 R14: 00007f39261a5fa0 R15: 00007ffe03859d38 [ 153.323308][ T6976] [ 153.633325][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.639853][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a557c00: rx timeout, send abort [ 153.648613][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a557c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.