last executing test programs: 2.667913667s ago: executing program 0 (id=73): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(0xffffffffffffffff, 0xc0106446, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$tun(r1, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1}}}}}, 0x1d) 2.529207158s ago: executing program 2 (id=76): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000240)) 2.469321847s ago: executing program 2 (id=78): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r0, &(0x7f0000000080)="067500", 0x3, 0x20000804, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x6, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x8, 0x0, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20000, 0x2, 0x250, 0x0, r9}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 1.960293173s ago: executing program 0 (id=85): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x48005}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x4}], 0x18, 0xc0a1}, 0x40000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) 1.960092747s ago: executing program 0 (id=86): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.578145681s ago: executing program 2 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd600101200078"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x83}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.411406698s ago: executing program 2 (id=91): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x5400032c) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x0) 929.870837ms ago: executing program 2 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004840)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa, 0xe}, {0x1}, {0xf, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 706.838583ms ago: executing program 1 (id=93): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) r1 = io_uring_setup(0x46eb, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 706.555212ms ago: executing program 2 (id=94): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 620.566967ms ago: executing program 1 (id=95): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x60000800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04232162"], 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44050) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 620.412827ms ago: executing program 1 (id=96): r0 = syz_open_dev$vim2m(&(0x7f0000001880), 0x2, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@userptr={0x9, 0x3, 0x4, 0x4, 0x73f, {}, {0x1, 0x1, 0x6, 0x7, 0x6, 0x3}, 0xfffffa7c, 0x2, {0x0}, 0x6}) 620.248445ms ago: executing program 1 (id=97): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000005c0)={0x1, 0x9, 0x6, &(0x7f0000000000)={0xb, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) 550.561719ms ago: executing program 1 (id=98): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x7, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2c}, 0x94) 550.338629ms ago: executing program 1 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf254c0000001c00a900c3dc9cb3c5d9d648046b446f6b47cf564b4db53fc6a6ad000e0001006e657464657673696d0000000f00"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x3) fchdir(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x76, 0xe9, 0xe4, 0x10, 0x45e, 0x445, 0x87ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xed, 0x5d, 0x2, 0x7d, 0xd8, 0xce, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 329.904532ms ago: executing program 3 (id=100): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}]}, 0x20}, 0x1, 0x7}, 0x0) 329.749922ms ago: executing program 0 (id=101): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 280.431814ms ago: executing program 3 (id=102): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000084000000050010"], 0x18}, 0x4000040) 280.198845ms ago: executing program 0 (id=103): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x203, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SETXATTR={0x2a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)='./file1\x00', 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, &(0x7f0000002840)='./file1\x00'}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 279.97005ms ago: executing program 0 (id=104): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r0, &(0x7f0000000080)="067500", 0x3, 0x20000804, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_STATUS_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000}, 0x8800) 279.814228ms ago: executing program 3 (id=105): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 190.130475ms ago: executing program 3 (id=106): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) setpgid(r3, 0x0) setpgid(0x0, r3) fspick(r2, &(0x7f0000000180)='./bus\x00', 0x0) 183.967µs ago: executing program 3 (id=107): r0 = semget$private(0x0, 0x2, 0xc0) semop(r0, &(0x7f0000001000)=[{0x1, 0x2d, 0x800}, {0x0, 0x31, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001200)) 0s ago: executing program 3 (id=108): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="2d3a6d795f72726f66696c65303a000000000036f428ed85cd24924c93fd8bcb1c526b63e50199181c662475f32b2ae5117e9f10ef02a345526a94cb2d", 0x3d) socket$inet_icmp(0x2, 0x2, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c52655a85653a372d4e3a4e"]) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x7, 0x5, 0x6, 0x7}, {0x0, 0x7f, 0x3, 0xc5}, {0x81, 0x2d, 0x2, 0x401}]}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60528' (ED25519) to the list of known hosts. [ 48.345073][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.345085][ T42] audit: type=1400 audit(1787839886.459:141): avc: denied { mounton } for pid=5709 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.357356][ T42] audit: type=1400 audit(1787839886.479:142): avc: denied { mount } for pid=5709 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.359719][ T5709] cgroup: Unknown subsys name 'net' [ 48.367932][ T42] audit: type=1400 audit(1787839886.489:143): avc: denied { unmount } for pid=5709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.523627][ T5709] cgroup: Unknown subsys name 'cpuset' [ 48.528119][ T5709] cgroup: Unknown subsys name 'rlimit' [ 48.672059][ T42] audit: type=1400 audit(1787839886.789:144): avc: denied { setattr } for pid=5709 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.679836][ T42] audit: type=1400 audit(1787839886.789:145): avc: denied { create } for pid=5709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.686883][ T42] audit: type=1400 audit(1787839886.789:146): avc: denied { write } for pid=5709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.694736][ T42] audit: type=1400 audit(1787839886.789:147): avc: denied { read } for pid=5709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.703569][ T42] audit: type=1400 audit(1787839886.819:148): avc: denied { read } for pid=5436 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.710890][ T42] audit: type=1400 audit(1787839886.819:149): avc: denied { read } for pid=5436 comm="dhcpcd" name="n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.718572][ T42] audit: type=1400 audit(1787839886.829:150): avc: denied { open } for pid=5436 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.733083][ T5711] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.452014][ T5709] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.509046][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 53.509057][ T42] audit: type=1400 audit(1787839891.619:157): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.521528][ T42] audit: type=1400 audit(1787839891.619:158): avc: denied { create } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.526426][ T5724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.528667][ T42] audit: type=1400 audit(1787839891.619:159): avc: denied { read write } for pid=5721 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.538422][ T42] audit: type=1400 audit(1787839891.619:160): avc: denied { open } for pid=5721 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.541213][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.548536][ T42] audit: type=1400 audit(1787839891.629:161): avc: denied { ioctl } for pid=5721 comm="syz-executor" path="socket:[5967]" dev="sockfs" ino=5967 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.565407][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.568295][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.570761][ T5729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.571336][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.571488][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.572608][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.573585][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.574160][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.578632][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.583372][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.586454][ T42] audit: type=1400 audit(1787839891.699:162): avc: denied { read } for pid=5721 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.586483][ T42] audit: type=1400 audit(1787839891.699:163): avc: denied { open } for pid=5721 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.587255][ T42] audit: type=1400 audit(1787839891.699:164): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.590776][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.590866][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.591032][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.596488][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.599248][ T42] audit: type=1400 audit(1787839891.709:165): avc: denied { module_request } for pid=5721 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.606011][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.612414][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.617460][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.619660][ T5729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.624268][ T42] audit: type=1400 audit(1787839891.739:166): avc: denied { sys_module } for pid=5720 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.184528][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.187746][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.190075][ T5721] bridge_slave_0: entered allmulticast mode [ 54.193375][ T5721] bridge_slave_0: entered promiscuous mode [ 54.197789][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.200095][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.203700][ T5721] bridge_slave_1: entered allmulticast mode [ 54.206922][ T5721] bridge_slave_1: entered promiscuous mode [ 54.311983][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.315325][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.317919][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.320487][ T5732] bridge_slave_0: entered allmulticast mode [ 54.323400][ T5732] bridge_slave_0: entered promiscuous mode [ 54.327146][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.329654][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.333354][ T5732] bridge_slave_1: entered allmulticast mode [ 54.336269][ T5732] bridge_slave_1: entered promiscuous mode [ 54.345277][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.347555][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.349848][ T5720] bridge_slave_0: entered allmulticast mode [ 54.353065][ T5720] bridge_slave_0: entered promiscuous mode [ 54.364595][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.399911][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.403035][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.406055][ T5720] bridge_slave_1: entered allmulticast mode [ 54.410183][ T5720] bridge_slave_1: entered promiscuous mode [ 54.424283][ T5721] team0: Port device team_slave_0 added [ 54.429580][ T5721] team0: Port device team_slave_1 added [ 54.487652][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.493417][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.509914][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.513278][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.523361][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.530705][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.538039][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.541902][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.544794][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.547690][ T5723] bridge_slave_0: entered allmulticast mode [ 54.552373][ T5723] bridge_slave_0: entered promiscuous mode [ 54.557367][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.559895][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.568443][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.597411][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.601462][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.604652][ T5723] bridge_slave_1: entered allmulticast mode [ 54.608416][ T5723] bridge_slave_1: entered promiscuous mode [ 54.647833][ T5720] team0: Port device team_slave_0 added [ 54.652647][ T5720] team0: Port device team_slave_1 added [ 54.657722][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.665560][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.670969][ T5732] team0: Port device team_slave_0 added [ 54.686880][ T5732] team0: Port device team_slave_1 added [ 54.765224][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.768243][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.779836][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.791620][ T5721] hsr_slave_0: entered promiscuous mode [ 54.795066][ T5721] hsr_slave_1: entered promiscuous mode [ 54.801643][ T5723] team0: Port device team_slave_0 added [ 54.807146][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.810366][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.821497][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.827857][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.831535][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.842532][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.849027][ T5723] team0: Port device team_slave_1 added [ 54.852295][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.854790][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.865880][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.903741][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.906818][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.917900][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.943985][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.946887][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.958456][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.988584][ T5720] hsr_slave_0: entered promiscuous mode [ 54.991944][ T5720] hsr_slave_1: entered promiscuous mode [ 54.994796][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 54.996964][ T5720] Cannot create hsr debugfs directory [ 55.004320][ T5732] hsr_slave_0: entered promiscuous mode [ 55.007491][ T5732] hsr_slave_1: entered promiscuous mode [ 55.010653][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 55.013124][ T5732] Cannot create hsr debugfs directory [ 55.170424][ T5723] hsr_slave_0: entered promiscuous mode [ 55.173696][ T5723] hsr_slave_1: entered promiscuous mode [ 55.176617][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 55.179165][ T5723] Cannot create hsr debugfs directory [ 55.471600][ T5721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.486335][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.496653][ T5721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.503745][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.507296][ T5721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.517313][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.524118][ T5721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.531398][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.601979][ T5729] Bluetooth: hci0: command tx timeout [ 55.612482][ T5720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.619254][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.624042][ T5720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.630465][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.636750][ T5720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.642661][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.646388][ T5720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.653157][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.681557][ T5729] Bluetooth: hci3: command tx timeout [ 55.681850][ T5724] Bluetooth: hci2: command tx timeout [ 55.684886][ T5726] Bluetooth: hci1: command tx timeout [ 55.727749][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.734828][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.738748][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.746372][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.752690][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.758644][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.762541][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.769350][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.856452][ T5723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.864353][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.870306][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.881905][ T5723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.887821][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.891818][ T5723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.897951][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.902085][ T5723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.907710][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.947034][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.987275][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.990275][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.015997][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.019217][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.048556][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.088508][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.097352][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.107683][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.110764][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.134388][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.136952][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.184055][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.194549][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.207369][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.210528][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.221869][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.224881][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.253208][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.272280][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.276009][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.294403][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.297984][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.453557][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.502226][ T5721] veth0_vlan: entered promiscuous mode [ 56.518124][ T5721] veth1_vlan: entered promiscuous mode [ 56.538973][ T5721] veth0_macvtap: entered promiscuous mode [ 56.544390][ T5721] veth1_macvtap: entered promiscuous mode [ 56.551179][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.563534][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.577686][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.604327][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.608227][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.637098][ T5720] veth0_vlan: entered promiscuous mode [ 56.679480][ T5720] veth1_vlan: entered promiscuous mode [ 56.700481][ T5723] veth0_vlan: entered promiscuous mode [ 56.705051][ T5732] veth0_vlan: entered promiscuous mode [ 56.713902][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.714511][ T5732] veth1_vlan: entered promiscuous mode [ 56.720432][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.724795][ T5723] veth1_vlan: entered promiscuous mode [ 56.749364][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.753791][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.768485][ T5720] veth0_macvtap: entered promiscuous mode [ 56.773501][ T5720] veth1_macvtap: entered promiscuous mode [ 56.778716][ T5723] veth0_macvtap: entered promiscuous mode [ 56.788643][ T5723] veth1_macvtap: entered promiscuous mode [ 56.794546][ T5721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.797576][ T5732] veth0_macvtap: entered promiscuous mode [ 56.806906][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.813669][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.817335][ T5732] veth1_macvtap: entered promiscuous mode [ 56.831272][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841870][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.861868][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.877899][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.891556][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.901963][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.931193][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.935477][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.987400][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.014226][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.104213][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.131725][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.141065][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.148923][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.161428][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.218233][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.226575][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.234956][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.245428][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.328408][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337261][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.393175][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.397239][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.404806][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.407910][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.466145][ T5880] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.491548][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.497965][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.504470][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.510972][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.514224][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.524760][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.570849][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.610528][ T5885] sl0: header compression turned on [ 57.681752][ T5726] Bluetooth: hci0: command tx timeout [ 57.762125][ T5726] Bluetooth: hci1: command tx timeout [ 57.762191][ T5724] Bluetooth: hci2: command tx timeout [ 57.767824][ T5729] Bluetooth: hci3: command tx timeout [ 58.883668][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 58.883681][ T42] audit: type=1400 audit(1787839896.999:216): avc: denied { watch } for pid=5932 comm="syz.2.14" path="/2/file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.898580][ T42] audit: type=1400 audit(1787839896.999:217): avc: denied { watch_sb watch_reads } for pid=5932 comm="syz.2.14" path="/2/file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.909875][ T42] audit: type=1400 audit(1787839896.999:218): avc: denied { create } for pid=5933 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.924628][ T42] audit: type=1400 audit(1787839897.009:219): avc: denied { setopt } for pid=5933 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.932199][ T42] audit: type=1400 audit(1787839897.039:220): avc: denied { create } for pid=5937 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.938184][ T42] audit: type=1400 audit(1787839897.039:221): avc: denied { setopt } for pid=5937 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.944547][ T42] audit: type=1400 audit(1787839897.039:222): avc: denied { ioctl } for pid=5937 comm="syz.1.17" path="socket:[10787]" dev="sockfs" ino=10787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.955122][ T42] audit: type=1400 audit(1787839897.039:223): avc: denied { write } for pid=5937 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.962454][ T5938] Invalid ELF header magic: != ELF [ 58.969174][ T42] audit: type=1400 audit(1787839897.039:224): avc: denied { create } for pid=5936 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.979514][ T42] audit: type=1400 audit(1787839897.049:225): avc: denied { create } for pid=5936 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.268240][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.274859][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.372819][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 59.382373][ T5956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5956 comm=syz.3.24 [ 59.762157][ T5729] Bluetooth: hci0: command tx timeout [ 59.840921][ T5729] Bluetooth: hci1: command tx timeout [ 59.850659][ T5729] Bluetooth: hci3: command tx timeout [ 59.853420][ T5729] Bluetooth: hci2: command tx timeout [ 60.363512][ T57] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 60.613035][ T57] usb 8-1: New USB device found, idVendor=0403, idProduct=e80d, bcdDevice=4f.70 [ 60.619435][ T57] usb 8-1: config 5 has an invalid interface number: 136 but max is 0 [ 60.622108][ T57] usb 8-1: config 5 has no interface number 0 [ 60.624157][ T57] usb 8-1: config 5 interface 136 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 60.627620][ T57] usb 8-1: config 5 interface 136 altsetting 2 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 60.631361][ T57] usb 8-1: config 5 interface 136 altsetting 2 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 60.635113][ T57] usb 8-1: config 5 interface 136 has no altsetting 0 [ 60.640664][ T57] usb 8-1: string descriptor 0 read error: -22 [ 60.642968][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.656216][ T5973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.667159][ T57] ftdi_sio 8-1:5.136: FTDI USB Serial Device converter detected [ 60.674292][ T57] ftdi_sio ttyUSB0: unknown device type: 0x4f70 [ 60.867628][ T5876] usb 8-1: USB disconnect, device number 2 [ 60.875935][ T5876] ftdi_sio 8-1:5.136: device disconnected [ 61.007580][ T5994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.078704][ T5997] nbd0: detected capacity change from 0 to 127 [ 61.504188][ T5801] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.671312][ T5801] usb 7-1: Using ep0 maxpacket: 8 [ 61.677497][ T5801] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.684317][ T5801] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 61.687481][ T5801] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.691444][ T5801] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.694932][ T5801] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.698306][ T5801] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.703211][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.780849][ T29] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 61.841293][ T5724] Bluetooth: hci0: command tx timeout [ 61.843403][ T5998] block nbd0: Receive control failed (result -104) [ 61.923033][ T5729] Bluetooth: hci3: command tx timeout [ 61.925497][ T5726] Bluetooth: hci1: command tx timeout [ 61.929324][ T5724] Bluetooth: hci2: command tx timeout [ 61.936653][ T5801] usb 7-1: usb_control_msg returned -32 [ 61.938855][ T5801] usbtmc 7-1:16.0: can't read capabilities [ 61.946746][ T29] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 61.959423][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.970382][ T29] usb 8-1: Product: syz [ 61.972138][ T29] usb 8-1: Manufacturer: syz [ 61.978503][ T29] usb 8-1: SerialNumber: syz [ 61.986173][ T29] usb 8-1: config 0 descriptor?? [ 62.001126][ T29] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 62.188095][ T6004] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 62.238412][ T5830] usb 7-1: USB disconnect, device number 2 [ 62.328244][ T29] gspca_stk1135: reg_w 0x2 err -71 [ 62.772024][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 62.994417][ T29] gspca_stk1135: Sensor write failed [ 63.005455][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.007438][ T29] gspca_stk1135: Sensor write failed [ 63.025685][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.027735][ T29] gspca_stk1135: Sensor read failed [ 63.029416][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.031783][ T29] gspca_stk1135: Sensor read failed [ 63.033455][ T29] gspca_stk1135: Detected sensor type unknown (0x0) [ 63.035707][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.038087][ T29] gspca_stk1135: Sensor read failed [ 63.039732][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.048632][ T29] gspca_stk1135: Sensor read failed [ 63.050310][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.056340][ T29] gspca_stk1135: Sensor write failed [ 63.058059][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 63.060007][ T29] gspca_stk1135: Sensor write failed [ 63.062868][ T29] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 63.069910][ T29] usb 8-1: USB disconnect, device number 3 [ 63.120814][ T1346] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.281424][ T1346] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 63.287663][ T1346] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.291972][ T1346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.301029][ T1346] usb 7-1: config 0 descriptor?? [ 63.305536][ T6076] veth0_macvtap: entered allmulticast mode [ 63.308090][ T6076] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 63.308814][ T1346] pwc: Askey VC010 type 2 USB webcam detected. [ 63.370670][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.520629][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 63.523161][ T29] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 63.529727][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.533414][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.536771][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 63.539728][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 63.542790][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.552088][ T29] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 63.554785][ T29] usb 8-1: Manufacturer: syz [ 63.561574][ T29] usb 8-1: config 0 descriptor?? [ 63.711759][ T1346] pwc: recv_control_msg error -32 req 02 val 2b00 [ 63.820681][ T29] rc_core: IR keymap rc-hauppauge not found [ 63.822613][ T29] Registered IR keymap rc-empty [ 63.825566][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.840827][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.863963][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 63.874119][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input5 [ 63.887741][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.900880][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.916036][ T1346] pwc: recv_control_msg error -71 req 02 val 2c00 [ 63.920173][ T1346] pwc: recv_control_msg error -71 req 04 val 1000 [ 63.921118][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.923325][ T1346] pwc: recv_control_msg error -71 req 04 val 1300 [ 63.932220][ T1346] pwc: recv_control_msg error -71 req 04 val 1400 [ 63.937484][ T1346] pwc: recv_control_msg error -71 req 02 val 2000 [ 63.945036][ T1346] pwc: recv_control_msg error -71 req 02 val 2100 [ 63.950924][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.951430][ T1346] pwc: recv_control_msg error -71 req 04 val 1500 [ 63.959795][ T1346] pwc: recv_control_msg error -71 req 02 val 2500 [ 63.962288][ T1346] pwc: recv_control_msg error -71 req 02 val 2400 [ 63.965044][ T1346] pwc: recv_control_msg error -71 req 02 val 2600 [ 63.967437][ T1346] pwc: recv_control_msg error -71 req 02 val 2900 [ 63.969832][ T1346] pwc: recv_control_msg error -71 req 02 val 2800 [ 63.971278][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 63.972912][ T1346] pwc: recv_control_msg error -71 req 04 val 1100 [ 63.977015][ T1346] pwc: recv_control_msg error -71 req 04 val 1200 [ 63.983694][ T1346] pwc: Registered as video103. [ 63.987557][ T1346] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/input/input6 [ 63.990730][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 64.010494][ T1346] usb 7-1: USB disconnect, device number 3 [ 64.020748][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 64.050703][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 64.072579][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 64.091214][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 64.118277][ T42] kauditd_printk_skb: 60 callbacks suppressed [ 64.118290][ T42] audit: type=1400 audit(1787839902.229:286): avc: denied { create } for pid=6082 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.129139][ T29] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 64.133817][ T42] audit: type=1400 audit(1787839902.239:287): avc: denied { setopt } for pid=6082 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.137568][ T29] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 64.146991][ T42] audit: type=1400 audit(1787839902.239:288): avc: denied { bind } for pid=6082 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.387295][ T5830] usb 8-1: USB disconnect, device number 4 [ 64.854096][ T2112] block nbd0: Connection timed out, retrying (0/1 alive) [ 64.857449][ T2112] block nbd0: Connection timed out, retrying (0/1 alive) [ 64.860175][ T2112] block nbd0: Dead connection, failed to find a fallback [ 64.863629][ T2112] block nbd0: shutting down sockets [ 64.865547][ T2112] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 64.868916][ T2112] Buffer I/O error on dev nbd0, logical block 1, async page read [ 64.871618][ T2112] Buffer I/O error on dev nbd0, logical block 2, async page read [ 64.874234][ T2112] Buffer I/O error on dev nbd0, logical block 3, async page read [ 64.876744][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.879819][ T2112] Buffer I/O error on dev nbd0, logical block 0, async page read [ 64.884244][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.887984][ T2112] Buffer I/O error on dev nbd0, logical block 0, async page read [ 64.890382][ T2112] Buffer I/O error on dev nbd0, logical block 1, async page read [ 64.892981][ T2112] Buffer I/O error on dev nbd0, logical block 2, async page read [ 64.895785][ T2112] Buffer I/O error on dev nbd0, logical block 3, async page read [ 64.899854][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.902861][ T2112] Buffer I/O error on dev nbd0, logical block 0, async page read [ 64.905246][ T2112] Buffer I/O error on dev nbd0, logical block 1, async page read [ 64.908092][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.911507][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.914866][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.918265][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.921491][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 64.924520][ T5730] ldm_validate_partition_table(): Disk read failed. [ 64.927661][ T2112] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.931820][ T5730] Dev nbd0: unable to read RDB block 0 [ 64.934546][ T5730] nbd0: unable to read partition table [ 64.954808][ T42] audit: type=1400 audit(1787839903.069:289): avc: denied { read write } for pid=6101 comm="syz.2.70" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.962946][ T42] audit: type=1400 audit(1787839903.069:290): avc: denied { open } for pid=6101 comm="syz.2.70" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.248259][ T5730] ldm_validate_partition_table(): Disk read failed. [ 65.254078][ T5730] Dev nbd0: unable to read RDB block 0 [ 65.261427][ T5730] nbd0: unable to read partition table [ 65.288920][ T42] audit: type=1400 audit(1787839903.399:291): avc: denied { setopt } for pid=6119 comm="syz.0.73" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.355922][ T6121] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 65.378164][ T42] audit: type=1400 audit(1787839903.489:292): avc: denied { connect } for pid=6117 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.443434][ T42] audit: type=1400 audit(1787839903.539:293): avc: denied { create } for pid=6129 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.505043][ T42] audit: type=1400 audit(1787839903.549:294): avc: denied { setopt } for pid=6129 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.514617][ T42] audit: type=1400 audit(1787839903.609:295): avc: denied { ioctl } for pid=6132 comm="syz.1.83" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.348500][ T6178] sctp: [Deprecated]: syz.0.101 (pid 6178) Use of int in maxseg socket option. [ 67.348500][ T6178] Use struct sctp_assoc_value instead [ 67.420727][ T5828] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.580678][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 67.584779][ T5828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 67.589275][ T5828] usb 6-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 67.593899][ T5828] usb 6-1: config 1 has an invalid interface number: 237 but max is 0 [ 67.596838][ T5828] usb 6-1: config 1 has no interface number 0 [ 67.598821][ T5828] usb 6-1: config 1 interface 237 has no altsetting 0 [ 67.606543][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.609432][ T5828] usb 6-1: Product: syz [ 67.611348][ T5828] usb 6-1: Manufacturer: syz [ 67.613357][ T5828] usb 6-1: SerialNumber: syz [ 67.690811][ T6196] ------------[ cut here ]------------ [ 67.693909][ T6196] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 67.698367][ T6196] WARNING: kernel/sched/core.c:9157 at __might_sleep+0x94/0xc0, CPU#1: syz.3.108/6196 [ 67.703750][ T6196] Modules linked in: [ 67.705385][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.3.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.709797][ T6196] Tainted: [L]=SOFTLOCKUP [ 67.711561][ T6196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.715159][ T6196] RIP: 0010:__might_sleep+0x97/0xc0 [ 67.717271][ T6196] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 67.723253][ T6196] RSP: 0018:ffffc9000462fb88 EFLAGS: 00010282 [ 67.725317][ T6196] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 67.728532][ T6196] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 67.731325][ T6196] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 67.733779][ T6196] R10: ffffc9000462fd40 R11: 0000000000000000 R12: ffff888024910000 [ 67.736467][ T6196] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0c230 [ 67.739693][ T6196] FS: 00007fd6bf63e6c0(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 67.743430][ T6196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.745993][ T6196] CR2: 00007fd6bf55da08 CR3: 00000000584e0000 CR4: 0000000000352ef0 [ 67.748834][ T6196] Call Trace: [ 67.749896][ T6196] [ 67.751201][ T6196] __mutex_lock+0x10e/0x1bc0 [ 67.752626][ T6196] ? futex_hash_allocate+0xd22/0x1120 [ 67.754241][ T6196] ? find_held_lock+0x2b/0x80 [ 67.755691][ T6196] ? futex_hash_allocate+0x6fc/0x1120 [ 67.757821][ T6196] ? __pfx___mutex_lock+0x10/0x10 [ 67.759724][ T6196] ? do_raw_spin_lock+0x128/0x260 [ 67.761394][ T6196] ? find_held_lock+0x2b/0x80 [ 67.762861][ T6196] ? prepare_to_wait_event+0x8d/0x720 [ 67.764593][ T6196] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.766479][ T6196] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.768410][ T6196] ? prepare_to_wait_event+0xbe/0x720 [ 67.770168][ T6196] ? futex_hash_allocate+0xd22/0x1120 [ 67.772003][ T6196] futex_hash_allocate+0xd22/0x1120 [ 67.773641][ T6196] ? __pfx_futex_hash_allocate+0x10/0x10 [ 67.775421][ T6196] ? irqentry_exit+0x24d/0xa10 [ 67.777432][ T6196] ? __pfx_var_wake_function+0x10/0x10 [ 67.779518][ T6196] ? static_key_count+0x5a/0x70 [ 67.781257][ T6196] futex_hash_prctl+0x1b8/0x390 [ 67.782807][ T6196] __do_sys_prctl+0x16dd/0x2270 [ 67.784413][ T6196] ? __pfx___do_sys_prctl+0x10/0x10 [ 67.786232][ T6196] ? kcov_ioctl+0x17a/0x760 [ 67.787789][ T6196] do_syscall_64+0x123/0x790 [ 67.789232][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.791099][ T6196] RIP: 0033:0x7fd6be79e0d9 [ 67.792515][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.799969][ T6196] RSP: 002b:00007fd6bf63e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.803539][ T6196] RAX: ffffffffffffffda RBX: 00007fd6bea25fa0 RCX: 00007fd6be79e0d9 [ 67.806770][ T6196] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 67.809812][ T6196] RBP: 00007fd6be835024 R08: 0000000000000000 R09: 0000000000000000 [ 67.812997][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.815445][ T6196] R13: 00007fd6bea26038 R14: 00007fd6bea25fa0 R15: 00007ffe6029aa68 [ 67.818478][ T6196] [ 67.819668][ T6196] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.821933][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.3.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.825959][ T6196] Tainted: [L]=SOFTLOCKUP [ 67.827388][ T6196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.830579][ T6196] Call Trace: [ 67.831673][ T6196] [ 67.832639][ T6196] dump_stack_lvl+0x100/0x190 [ 67.834244][ T6196] vpanic+0x553/0x970 [ 67.835722][ T6196] ? __pfx_vpanic+0x10/0x10 [ 67.837449][ T6196] panic+0xd1/0xe0 [ 67.838753][ T6196] ? __pfx_panic+0x10/0x10 [ 67.840291][ T6196] check_panic_on_warn.cold+0x19/0x34 [ 67.842035][ T6196] ? __might_sleep+0x94/0xc0 [ 67.843465][ T6196] __warn.cold+0x191/0x318 [ 67.844861][ T6196] __report_bug+0x30f/0x440 [ 67.846537][ T6196] ? __might_sleep+0x94/0xc0 [ 67.848200][ T6196] ? __pfx___report_bug+0x10/0x10 [ 67.849842][ T6196] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.851443][ T6196] ? prepare_to_wait_event+0x8d/0x720 [ 67.853114][ T6196] ? prepare_to_wait_event+0x8d/0x720 [ 67.854757][ T6196] ? futex_hash_allocate+0xd22/0x1120 [ 67.856745][ T6196] ? __might_sleep+0x97/0xc0 [ 67.858694][ T6196] report_bug_entry+0xe2/0x290 [ 67.860725][ T6196] ? __might_sleep+0x97/0xc0 [ 67.862466][ T6196] handle_bug+0x1cd/0x2a0 [ 67.863959][ T6196] exc_invalid_op+0x17/0x50 [ 67.865547][ T6196] asm_exc_invalid_op+0x1a/0x20 [ 67.867520][ T6196] RIP: 0010:__might_sleep+0x97/0xc0 [ 67.869251][ T6196] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 67.875092][ T6196] RSP: 0018:ffffc9000462fb88 EFLAGS: 00010282 [ 67.877136][ T6196] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 67.879636][ T6196] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 67.882213][ T6196] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 67.884833][ T6196] R10: ffffc9000462fd40 R11: 0000000000000000 R12: ffff888024910000 [ 67.887561][ T6196] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0c230 [ 67.890110][ T6196] ? futex_hash_allocate+0xd22/0x1120 [ 67.891788][ T6196] ? prepare_to_wait_event+0x8d/0x720 [ 67.893446][ T6196] ? prepare_to_wait_event+0x8d/0x720 [ 67.895099][ T6196] ? __lock_acquire+0x4c5/0x1ec0 [ 67.896827][ T6196] __mutex_lock+0x10e/0x1bc0 [ 67.898278][ T6196] ? futex_hash_allocate+0xd22/0x1120 [ 67.899997][ T6196] ? find_held_lock+0x2b/0x80 [ 67.901584][ T6196] ? futex_hash_allocate+0x6fc/0x1120 [ 67.903473][ T6196] ? __pfx___mutex_lock+0x10/0x10 [ 67.905238][ T6196] ? do_raw_spin_lock+0x128/0x260 [ 67.906809][ T6196] ? find_held_lock+0x2b/0x80 [ 67.908334][ T6196] ? prepare_to_wait_event+0x8d/0x720 [ 67.909986][ T6196] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.911594][ T6196] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.913420][ T6196] ? prepare_to_wait_event+0xbe/0x720 [ 67.915101][ T6196] ? futex_hash_allocate+0xd22/0x1120 [ 67.916775][ T6196] futex_hash_allocate+0xd22/0x1120 [ 67.918402][ T6196] ? __pfx_futex_hash_allocate+0x10/0x10 [ 67.920331][ T6196] ? irqentry_exit+0x24d/0xa10 [ 67.922031][ T6196] ? __pfx_var_wake_function+0x10/0x10 [ 67.923997][ T6196] ? static_key_count+0x5a/0x70 [ 67.925719][ T6196] futex_hash_prctl+0x1b8/0x390 [ 67.927230][ T6196] __do_sys_prctl+0x16dd/0x2270 [ 67.928804][ T6196] ? __pfx___do_sys_prctl+0x10/0x10 [ 67.930396][ T6196] ? kcov_ioctl+0x17a/0x760 [ 67.931784][ T6196] do_syscall_64+0x123/0x790 [ 67.933174][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.935023][ T6196] RIP: 0033:0x7fd6be79e0d9 [ 67.936475][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.942530][ T6196] RSP: 002b:00007fd6bf63e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.945054][ T6196] RAX: ffffffffffffffda RBX: 00007fd6bea25fa0 RCX: 00007fd6be79e0d9 [ 67.947356][ T6196] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 67.949906][ T6196] RBP: 00007fd6be835024 R08: 0000000000000000 R09: 0000000000000000 [ 67.952484][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.954705][ T6196] R13: 00007fd6bea26038 R14: 00007fd6bea25fa0 R15: 00007ffe6029aa68 [ 67.957129][ T6196] [ 67.958759][ T6196] Kernel Offset: disabled [ 67.960069][ T6196] Rebooting in 86400 seconds..