last executing test programs: 1m7.33590295s ago: executing program 2 (id=226): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x9c) 55.155331459s ago: executing program 4 (id=250): write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e0100000824020101020000082402010000cc9a"], 0x0) 52.291746931s ago: executing program 4 (id=258): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7}]}) unshare(0x44000680) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 48.655290446s ago: executing program 4 (id=269): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c0c4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 11.566698616s ago: executing program 3 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 11.27924844s ago: executing program 3 (id=339): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) creat(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 10.927113211s ago: executing program 3 (id=341): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xf, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f, 0x18}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x8, 0xfb, 0x20, 0x7}, 0x3a, &(0x7f0000000200)={0x5, 0xf, 0x3a, 0x3, [@generic={0x2b, 0x10, 0x1, "2b91851fa35a83ddc4751973d2b4a21bc52346e09ab67288ca5450207a8abaed86842456c156d622"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0xa, 0x378}]}, 0x1, [{0xd4, &(0x7f0000000500)=@string={0xd4, 0x3, "28adac658816b1bfbaff7732c15d0502698deabcfdcb25ad21f505afd330bc810b9f5110993529c58d5e78cf179b4602e95920a90bcc0ace9cf001024c6399272ebd4606636979881bdb81a51e1eab6c756c64ec899825abafc8fa4cad7b31be4ce3d4613ca46f0c659f24ab2faa465dc78e0b5ccc8eb955f778ff3067ffe6d0b9414035914cca54685021665f8c37f477a07aa2a774bde56b8779498a1f211c686900e469aa303f0a1cb50d24382eeabf828b6c0206235d5daf412817f3a146d9638a15e06d7a251679c1d04f27856b7005"}}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x40, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.726848188s ago: executing program 3 (id=349): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x7) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140), 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ec40007"], 0x6a) syslog(0x0, &(0x7f0000000300)=""/163, 0xa3) syslog(0xa, &(0x7f0000000180)=""/222, 0xde) syslog(0x0, 0x0, 0x0) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f00000003c0)=""/135, 0x87) syslog(0x0, &(0x7f00000004c0)=""/202, 0xca) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x1, &(0x7f0000000280)=""/9, 0x9) syslog(0x2, 0x0, 0x0) syslog(0xa, 0x0, 0x0) syslog(0x2, &(0x7f0000000c00)=""/143, 0x8f) syslog(0x4, &(0x7f0000000cc0)=""/11, 0xb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) write$ppp(r2, &(0x7f00000002c0)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4004) 6.744034482s ago: executing program 1 (id=350): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@framed={{0x3, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x88}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000280)={0x81, 0x0, 0x0, 0x7, 0x15, "cd2c683c06000081a0f200b7fc380eb6f86d22"}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffdef) shutdown(r1, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, 0x0, 0x0, 0x200000c1) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x80000001, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 6.722434729s ago: executing program 2 (id=233): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000002060000000000000000000000060000050004000000000011000300486173683a69702c706f5174000008001c100780050014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 5.577743256s ago: executing program 2 (id=353): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r0, 0x83000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x20, 0x0, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x5}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setresuid(0x0, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, 0x0, 0x0) 5.462441769s ago: executing program 1 (id=354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 5.279825594s ago: executing program 0 (id=355): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8}, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.185235482s ago: executing program 1 (id=356): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r1, 0x0, &(0x7f00000001c0)='X', 0x1}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0xa93, 0x0, 0x3fff}) 5.013121269s ago: executing program 2 (id=357): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r1, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x8001001, 0x8, '9P2000.u'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x80}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) ioctl$TIOCSTI(r4, 0x5423, &(0x7f00000004c0)) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x90}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x31}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="f0000000100000000000000000000000acf313aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000000000000fe8000"/37], 0xf0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc0506617, &(0x7f0000000080)=0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'veth0_to_bridge\x00', @random='\x00\x00\x000\x00'}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3f}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.245948729s ago: executing program 0 (id=358): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000080)) 3.091952336s ago: executing program 1 (id=359): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1) socket$key(0xf, 0x3, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000980)) 2.731527569s ago: executing program 0 (id=360): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x79) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), 0x4) 2.496482076s ago: executing program 3 (id=361): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x0, 0x0) 2.270738957s ago: executing program 0 (id=362): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000002060000000000000000000000060000050004000000000011000300486173683a69702c706f5174000008001c100780050014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.949074045s ago: executing program 1 (id=363): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_emit_vhci(&(0x7f0000001540)=@HCI_SCODATA_PKT={0x3, {0x0, 0x90}, "e0ec62c122083e14aeaa774fee50006a43d42682c6e82cdd220e05e29fa3f79c7b52b61a7e6f41d7aa43b598739d826c249396af41527f8e5a7c4ff297919ed04f1a71c5ccae02a5b2ccd8000100124c70a9f4272923e50d1c98e119318d87e86909069b85fe955b12ed6a3118676eab414767f6a6bc2a99eb1f00cd9d143103d8d1e3fd211f7812b283cbc2517b3aeb"}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 1.892562291s ago: executing program 3 (id=364): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = dup3(r1, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) 1.85767395s ago: executing program 4 (id=270): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 1.495630321s ago: executing program 2 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "df8821b3bba7c1cf", "7c3c3ce9249e0cb0699fedceb32442a9880a937987d6041c4da5c9e9fbc10df6", "50d900", "8068b0bd1a4a3211"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, '\x00', "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cb121291a43fe"}, 0x38) 774.224383ms ago: executing program 0 (id=366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$igmp6(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 637.892456ms ago: executing program 4 (id=367): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000002c0)=0x3ff, 0x4) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x20, 0x6, 0x8, {{0x20, 0x4, 0x1, 0x5, 0x80, 0x68, 0x0, 0x18, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102, {[@end, @lsrr={0x83, 0x13, 0xb8, [@remote, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp_addr={0x44, 0x44, 0x92, 0x1, 0x0, [{@multicast1, 0x4}, {@broadcast, 0xffffffff}, {@multicast2, 0x1}, {@multicast1, 0x63}, {@broadcast, 0x46d}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@broadcast, 0xffffffde}]}, @timestamp_prespec={0x44, 0x14, 0x94, 0x3, 0x7, [{@private=0xa010101, 0x65}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x7}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x700, 0x20, 0x5, 0x6, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x67, 0x0, 0x40, 0xedad2e2b0c9c8cbb, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, {[@lsrr={0x83, 0xf, 0xce, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x3fc0000, 0x7, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0x1b, 0x83, [@private=0xa010101, @rand_addr=0x64010101, @multicast1, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x23}]}, @rr={0x7, 0x1f, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @empty, @multicast2, @rand_addr=0x64010102, @private=0xa010100, @loopback]}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x0, 0x34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7800, 0x80, 0x100, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x5, 0xfffffff8, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x65, 0x0, 0x9, 0x29, 0x0, @remote, @broadcast, {[@rr={0x7, 0x1f, 0x1b, [@empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010101, @local, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x20, 0x2, 0x19, @dev={0xfe, 0x80, '\x00', 0x39}, @private1, 0x1, 0x700, 0x15f3, 0x8a7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000780)={@loopback, @empty, 0x0}, &(0x7f00000007c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x510, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6fd3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x453, 0x3, 0x2, 0x80000001}, {0x4, 0x1f, 0x8, 0x9}, {0x1ff, 0x1, 0xf8, 0x1ff}, {0x8, 0x7f, 0xff, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x75a}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) socketpair$unix(0x1, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2750], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 417.535646ms ago: executing program 2 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 374.328502ms ago: executing program 1 (id=369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x44}}, 0x0) 144.251291ms ago: executing program 4 (id=370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00002c2000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f00000013c0)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}], 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xffa0) 0s ago: executing program 0 (id=371): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 102.153768][ T29] audit: type=1400 audit(1721616688.555:87): avc: denied { mounton } for pid=5082 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 102.167472][ T5082] cgroup: Unknown subsys name 'net' [ 102.176867][ T29] audit: type=1400 audit(1721616688.555:88): avc: denied { mount } for pid=5082 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.204808][ T29] audit: type=1400 audit(1721616688.585:89): avc: denied { unmount } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.367536][ T5082] cgroup: Unknown subsys name 'rlimit' [ 102.551504][ T29] audit: type=1400 audit(1721616688.945:90): avc: denied { setattr } for pid=5082 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.575552][ T29] audit: type=1400 audit(1721616688.955:91): avc: denied { create } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.604973][ T29] audit: type=1400 audit(1721616688.955:92): avc: denied { write } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.632601][ T29] audit: type=1400 audit(1721616688.955:93): avc: denied { read } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.662837][ T29] audit: type=1400 audit(1721616688.985:94): avc: denied { mounton } for pid=5082 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.688325][ T29] audit: type=1400 audit(1721616688.985:95): avc: denied { mount } for pid=5082 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.712106][ T29] audit: type=1400 audit(1721616689.005:96): avc: denied { read } for pid=4758 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 102.777715][ T5086] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 102.938157][ T928] cfg80211: failed to load regulatory.db [ 104.736346][ T5082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.569375][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 107.569400][ T29] audit: type=1400 audit(1721616693.965:103): avc: denied { mounton } for pid=5093 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.611021][ T29] audit: type=1400 audit(1721616693.965:104): avc: denied { mount } for pid=5094 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.655324][ T29] audit: type=1400 audit(1721616693.965:105): avc: denied { create } for pid=5094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.679759][ T29] audit: type=1400 audit(1721616693.975:106): avc: denied { read write } for pid=5095 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.738691][ T29] audit: type=1400 audit(1721616693.975:107): avc: denied { open } for pid=5095 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.753313][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.775576][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.784419][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.784655][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.793871][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.802884][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.809138][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.815979][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.822017][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.834583][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.837222][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.849518][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.850175][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.860501][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.866383][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.872867][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.879742][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.885553][ T29] audit: type=1400 audit(1721616694.045:108): avc: denied { ioctl } for pid=5095 comm="syz-executor" path="socket:[4331]" dev="sockfs" ino=4331 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.893000][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.923142][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.924239][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.931914][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.941303][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.956812][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.965159][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.968965][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.972998][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.986311][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.988850][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.013615][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.032458][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.072237][ T29] audit: type=1400 audit(1721616694.395:109): avc: denied { read } for pid=5094 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.096651][ T29] audit: type=1400 audit(1721616694.405:110): avc: denied { open } for pid=5094 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.122721][ T29] audit: type=1400 audit(1721616694.405:111): avc: denied { mounton } for pid=5094 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.871805][ T29] audit: type=1400 audit(1721616695.265:112): avc: denied { module_request } for pid=5096 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.118632][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 109.205325][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 109.290171][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 109.305750][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 109.565180][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 109.658722][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.667158][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.675152][ T5094] bridge_slave_0: entered allmulticast mode [ 109.684601][ T5094] bridge_slave_0: entered promiscuous mode [ 109.806485][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.827647][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.839615][ T5094] bridge_slave_1: entered allmulticast mode [ 109.849855][ T5094] bridge_slave_1: entered promiscuous mode [ 109.897807][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.906072][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.913613][ T5096] bridge_slave_0: entered allmulticast mode [ 109.921472][ T5096] bridge_slave_0: entered promiscuous mode [ 109.974817][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.982357][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.989746][ T5097] bridge_slave_0: entered allmulticast mode [ 109.998927][ T5097] bridge_slave_0: entered promiscuous mode [ 110.048855][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.053140][ T5110] Bluetooth: hci1: command tx timeout [ 110.059173][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.062425][ T5101] Bluetooth: hci2: command tx timeout [ 110.073179][ T5096] bridge_slave_1: entered allmulticast mode [ 110.075110][ T4488] Bluetooth: hci3: command tx timeout [ 110.085528][ T5096] bridge_slave_1: entered promiscuous mode [ 110.124489][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.132108][ T4488] Bluetooth: hci4: command tx timeout [ 110.132230][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.138016][ T4488] Bluetooth: hci0: command tx timeout [ 110.145358][ T5097] bridge_slave_1: entered allmulticast mode [ 110.160076][ T5097] bridge_slave_1: entered promiscuous mode [ 110.168046][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.175469][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.183045][ T5093] bridge_slave_0: entered allmulticast mode [ 110.190861][ T5093] bridge_slave_0: entered promiscuous mode [ 110.205108][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.266336][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.274112][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.282905][ T5093] bridge_slave_1: entered allmulticast mode [ 110.290668][ T5093] bridge_slave_1: entered promiscuous mode [ 110.303969][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.317812][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.425037][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.461521][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.524561][ T5094] team0: Port device team_slave_0 added [ 110.552235][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.559465][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.571947][ T5095] bridge_slave_0: entered allmulticast mode [ 110.579755][ T5095] bridge_slave_0: entered promiscuous mode [ 110.590555][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.598002][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.606648][ T5095] bridge_slave_1: entered allmulticast mode [ 110.614758][ T5095] bridge_slave_1: entered promiscuous mode [ 110.626595][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.640383][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.654103][ T5094] team0: Port device team_slave_1 added [ 110.665232][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.806779][ T5096] team0: Port device team_slave_0 added [ 110.822270][ T5096] team0: Port device team_slave_1 added [ 110.854662][ T5097] team0: Port device team_slave_0 added [ 110.912172][ T5093] team0: Port device team_slave_0 added [ 110.945013][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.957968][ T5097] team0: Port device team_slave_1 added [ 110.990088][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.997430][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.024259][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.039910][ T5093] team0: Port device team_slave_1 added [ 111.094650][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.125955][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.133902][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.160526][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.206220][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.213322][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.239447][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.254179][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.261315][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.287811][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.302160][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.309175][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.335712][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.407938][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.415318][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.442481][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.458441][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.466241][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.492302][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.505339][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.512491][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.538747][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.565109][ T5095] team0: Port device team_slave_0 added [ 111.576950][ T5095] team0: Port device team_slave_1 added [ 111.768512][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.775808][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.802493][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.844867][ T5097] hsr_slave_0: entered promiscuous mode [ 111.852758][ T5097] hsr_slave_1: entered promiscuous mode [ 111.869573][ T5094] hsr_slave_0: entered promiscuous mode [ 111.877135][ T5094] hsr_slave_1: entered promiscuous mode [ 111.885252][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.893890][ T5094] Cannot create hsr debugfs directory [ 111.921398][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.928869][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.955891][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.998282][ T5096] hsr_slave_0: entered promiscuous mode [ 112.006047][ T5096] hsr_slave_1: entered promiscuous mode [ 112.013671][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.021280][ T5096] Cannot create hsr debugfs directory [ 112.073122][ T5093] hsr_slave_0: entered promiscuous mode [ 112.080290][ T5093] hsr_slave_1: entered promiscuous mode [ 112.088215][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.095958][ T5093] Cannot create hsr debugfs directory [ 112.132132][ T5101] Bluetooth: hci2: command tx timeout [ 112.138297][ T5101] Bluetooth: hci1: command tx timeout [ 112.141910][ T4488] Bluetooth: hci3: command tx timeout [ 112.213743][ T4488] Bluetooth: hci0: command tx timeout [ 112.213754][ T5101] Bluetooth: hci4: command tx timeout [ 112.436055][ T5095] hsr_slave_0: entered promiscuous mode [ 112.443792][ T5095] hsr_slave_1: entered promiscuous mode [ 112.450353][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.458835][ T5095] Cannot create hsr debugfs directory [ 113.205138][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.241114][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.260802][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.289866][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.389447][ T5094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.420778][ T5094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.445447][ T5094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.460606][ T5094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.583362][ T5093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.599830][ T5093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.630456][ T5093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.649039][ T5093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.853938][ T5097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.871451][ T5097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.917051][ T5097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.938234][ T5097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.185353][ T5095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.206378][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.213691][ T5101] Bluetooth: hci1: command tx timeout [ 114.224838][ T5101] Bluetooth: hci3: command tx timeout [ 114.230340][ T5101] Bluetooth: hci2: command tx timeout [ 114.255068][ T5095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.270900][ T5095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.290444][ T5095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.297344][ T5101] Bluetooth: hci4: command tx timeout [ 114.302105][ T5101] Bluetooth: hci0: command tx timeout [ 114.356867][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.486100][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.550236][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.576630][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.587085][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.594819][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.658780][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.683562][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.690800][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.733674][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.740905][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.756455][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.763800][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.821432][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.828728][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.841624][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.849122][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.950752][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.044547][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.123151][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.130433][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.146447][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.153711][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.285389][ T5096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.298457][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.511846][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.542819][ T29] audit: type=1400 audit(1721616701.925:113): avc: denied { sys_module } for pid=5096 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.749679][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.900957][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.908346][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.999056][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.006459][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.302344][ T5101] Bluetooth: hci2: command tx timeout [ 116.307849][ T5101] Bluetooth: hci3: command tx timeout [ 116.309988][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.314960][ T4488] Bluetooth: hci1: command tx timeout [ 116.348919][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.363160][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.372187][ T4488] Bluetooth: hci0: command tx timeout [ 116.372796][ T5101] Bluetooth: hci4: command tx timeout [ 116.406138][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.560087][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.759456][ T5094] veth0_vlan: entered promiscuous mode [ 116.829428][ T5096] veth0_vlan: entered promiscuous mode [ 116.857517][ T5093] veth0_vlan: entered promiscuous mode [ 116.866814][ T5094] veth1_vlan: entered promiscuous mode [ 116.929058][ T5096] veth1_vlan: entered promiscuous mode [ 116.988086][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.037313][ T5093] veth1_vlan: entered promiscuous mode [ 117.048137][ T5097] veth0_vlan: entered promiscuous mode [ 117.109109][ T5097] veth1_vlan: entered promiscuous mode [ 117.222959][ T5096] veth0_macvtap: entered promiscuous mode [ 117.275316][ T5094] veth0_macvtap: entered promiscuous mode [ 117.298908][ T5096] veth1_macvtap: entered promiscuous mode [ 117.344375][ T5094] veth1_macvtap: entered promiscuous mode [ 117.388554][ T5093] veth0_macvtap: entered promiscuous mode [ 117.441273][ T5093] veth1_macvtap: entered promiscuous mode [ 117.461207][ T5097] veth0_macvtap: entered promiscuous mode [ 117.487246][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.500646][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.514412][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.529196][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.564920][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.586699][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.597553][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.609899][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.637196][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.646989][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.656267][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.666908][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.687639][ T5097] veth1_macvtap: entered promiscuous mode [ 117.707396][ T5094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.716481][ T5094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.729477][ T5094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.740040][ T5094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.821233][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.832470][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.844918][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.855831][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.868124][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.889801][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.902976][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.913510][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.924120][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.936820][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.990462][ T5093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.999770][ T5093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.009257][ T5093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.018234][ T5093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.076176][ T5095] veth0_vlan: entered promiscuous mode [ 118.086936][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.098877][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.109452][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.120500][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.130628][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.142253][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.155627][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.247158][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.269247][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.280503][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.293835][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.303914][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.314545][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.328280][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.433480][ T5095] veth1_vlan: entered promiscuous mode [ 118.445268][ T5097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.454647][ T5097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.464059][ T5097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.473528][ T5097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.526622][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.547525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.651859][ T3852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.659782][ T3852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.769076][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.781238][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.808909][ T5095] veth0_macvtap: entered promiscuous mode [ 118.853995][ T29] audit: type=1400 audit(1721616705.235:114): avc: denied { mounton } for pid=5094 comm="syz-executor" path="/root/syzkaller.SzG7IG/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 118.882222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.890006][ T5095] veth1_macvtap: entered promiscuous mode [ 118.890178][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.912676][ T29] audit: type=1400 audit(1721616705.255:115): avc: denied { mount } for pid=5094 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.940691][ T29] audit: type=1400 audit(1721616705.255:116): avc: denied { mounton } for pid=5094 comm="syz-executor" path="/root/syzkaller.SzG7IG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.029102][ T29] audit: type=1400 audit(1721616705.255:117): avc: denied { mount } for pid=5094 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.078313][ T29] audit: type=1400 audit(1721616705.305:118): avc: denied { unmount } for pid=5094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.109823][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.128738][ T2447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.146703][ T2447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.153226][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.157610][ T29] audit: type=1400 audit(1721616705.345:119): avc: denied { mounton } for pid=5094 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 119.167634][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.198874][ T29] audit: type=1400 audit(1721616705.375:120): avc: denied { mount } for pid=5094 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.252545][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.271232][ T29] audit: type=1400 audit(1721616705.605:121): avc: denied { read write } for pid=5094 comm="syz-executor" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.289260][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.306043][ T29] audit: type=1400 audit(1721616705.605:122): avc: denied { open } for pid=5094 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.315232][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.342911][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.354553][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.368011][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.676933][ T3852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.688722][ T3852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.788366][ T3852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.970923][ T3852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.408775][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.462007][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.536050][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.616444][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.650664][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 120.650689][ T29] audit: type=1400 audit(1721616707.045:127): avc: denied { create } for pid=5186 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.669939][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.689301][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.735023][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.748000][ T29] audit: type=1400 audit(1721616707.105:128): avc: denied { connect } for pid=5186 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.773333][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.796683][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.817601][ T29] audit: type=1400 audit(1721616707.215:129): avc: denied { map_create } for pid=5190 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.851607][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 120.909771][ T29] audit: type=1400 audit(1721616707.215:130): avc: denied { map_read map_write } for pid=5190 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.961613][ T5193] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.982291][ T29] audit: type=1400 audit(1721616707.235:131): avc: denied { prog_load } for pid=5190 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.990572][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.051431][ T29] audit: type=1400 audit(1721616707.235:132): avc: denied { bpf } for pid=5190 comm="syz.1.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.058744][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.107117][ T29] audit: type=1400 audit(1721616707.255:133): avc: denied { perfmon } for pid=5190 comm="syz.1.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.120808][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.143667][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.152586][ T29] audit: type=1400 audit(1721616707.285:134): avc: denied { prog_run } for pid=5190 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.152682][ T29] audit: type=1400 audit(1721616707.355:135): avc: denied { create } for pid=5192 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.152771][ T29] audit: type=1400 audit(1721616707.415:136): avc: denied { read write } for pid=5190 comm="syz.1.6" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.307610][ T2472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.362522][ T2472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.402262][ T4941] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.645165][ T4941] usb 2-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32 [ 121.666849][ T4941] usb 2-1: config 1 interface 0 has no altsetting 0 [ 121.687462][ T4941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 121.717247][ T4941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.766673][ T4941] usb 2-1: Product: ࠌ [ 121.771017][ T4941] usb 2-1: Manufacturer: ȗ⩪㞄밽屠莅㩁齟୾ᗞ洫뜠ඓ睗ǽ馊䚭讇㕁㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك琮褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ杈 [ 121.810973][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.862116][ T4941] usb 2-1: SerialNumber: ц [ 121.871901][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.007650][ T5191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.307866][ T3852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.363931][ T3852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.434725][ T4941] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8 [ 122.626382][ T4941] usb 2-1: USB disconnect, device number 2 [ 122.732721][ T4941] usblp0: removed [ 123.130696][ T5217] syz.4.5[5217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.130874][ T5217] syz.4.5[5217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.452107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.429479][ T5212] Cannot find add_set index 0 as target [ 125.960340][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 125.960364][ T29] audit: type=1326 audit(1721616712.355:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.4.5" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa81bb75b59 code=0x0 [ 125.992928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.081094][ T5227] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.133163][ T29] audit: type=1400 audit(1721616712.475:165): avc: denied { read } for pid=5214 comm="syz.4.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.244401][ T29] audit: type=1400 audit(1721616712.475:166): avc: denied { open } for pid=5214 comm="syz.4.5" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.367637][ T29] audit: type=1400 audit(1721616712.475:167): avc: denied { ioctl } for pid=5214 comm="syz.4.5" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.475400][ T29] audit: type=1400 audit(1721616712.705:168): avc: denied { create } for pid=5230 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.583083][ T29] audit: type=1400 audit(1721616712.715:169): avc: denied { write } for pid=5230 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.588731][ T5237] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.669736][ T29] audit: type=1400 audit(1721616712.715:170): avc: denied { nlmsg_read } for pid=5230 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.690844][ T29] audit: type=1400 audit(1721616712.735:171): avc: denied { read } for pid=5230 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.715794][ T29] audit: type=1400 audit(1721616712.795:172): avc: denied { read } for pid=5230 comm="syz.1.15" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 126.753154][ T29] audit: type=1400 audit(1721616712.795:173): avc: denied { open } for pid=5230 comm="syz.1.15" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.182135][ T5162] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.229780][ T5247] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.255221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 127.505670][ T5162] usb 4-1: config 0 has no interfaces? [ 127.514357][ T5162] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 127.655111][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.700323][ T5162] usb 4-1: config 0 descriptor?? [ 127.949967][ T5162] usb 4-1: USB disconnect, device number 2 [ 128.077799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.342118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 128.542835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 128.956415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.480762][ T5173] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.672831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 129.731374][ T5173] usb 1-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32 [ 129.733397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 129.763184][ T5173] usb 1-1: config 1 interface 0 has no altsetting 0 [ 129.805377][ T5173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.848309][ T5173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.858097][ T5173] usb 1-1: Product: ࠌ [ 129.863089][ T5173] usb 1-1: Manufacturer: ȗ⩪㞄밽屠莅㩁齟୾ᗞ洫뜠ඓ睗ǽ馊䚭讇㕁㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك琮褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ杈 [ 129.888504][ T5173] usb 1-1: SerialNumber: ц [ 129.952283][ T5261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.006126][ T5267] input: syz0 as /devices/virtual/input/input5 [ 130.692565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 131.782667][ T5173] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8 [ 131.834697][ T5173] usb 1-1: USB disconnect, device number 2 [ 131.882495][ T5173] usblp0: removed [ 132.312714][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 132.312739][ T29] audit: type=1400 audit(1721616718.705:193): avc: denied { read } for pid=5287 comm="syz.4.34" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.595349][ T29] audit: type=1400 audit(1721616718.715:194): avc: denied { open } for pid=5287 comm="syz.4.34" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.804047][ T29] audit: type=1400 audit(1721616718.905:195): avc: denied { create } for pid=5287 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.162011][ T29] audit: type=1400 audit(1721616718.925:196): avc: denied { ioctl } for pid=5287 comm="syz.4.34" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.230128][ T29] audit: type=1400 audit(1721616719.085:197): avc: denied { write } for pid=5287 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.561399][ T29] audit: type=1400 audit(1721616719.955:198): avc: denied { read write } for pid=5296 comm="syz.2.35" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.593491][ T5302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35'. [ 133.679462][ T29] audit: type=1400 audit(1721616719.955:199): avc: denied { open } for pid=5296 comm="syz.2.35" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.115131][ T29] audit: type=1400 audit(1721616720.015:200): avc: denied { getopt } for pid=5296 comm="syz.2.35" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.428726][ T5306] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 134.707256][ T29] audit: type=1326 audit(1721616721.105:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.4.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa81bb75b59 code=0x0 [ 134.889579][ T5320] bridge0: port 3(gretap0) entered blocking state [ 134.928470][ T5320] bridge0: port 3(gretap0) entered disabled state [ 134.966012][ T5320] gretap0: entered allmulticast mode [ 135.089110][ T5320] gretap0: entered promiscuous mode [ 135.118649][ T29] audit: type=1400 audit(1721616721.485:202): avc: denied { ioctl } for pid=5299 comm="syz.1.36" path="socket:[7158]" dev="sockfs" ino=7158 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.156400][ T5320] bridge0: port 3(gretap0) entered blocking state [ 135.163488][ T5320] bridge0: port 3(gretap0) entered forwarding state [ 135.742983][ T5328] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.819310][ T5330] hub 6-0:1.0: USB hub found [ 135.831983][ T5330] hub 6-0:1.0: 1 port detected [ 137.972334][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 137.972384][ T29] audit: type=1400 audit(1721616724.315:204): avc: denied { create } for pid=5334 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.911844][ T29] audit: type=1400 audit(1721616725.305:205): avc: denied { read } for pid=5342 comm="syz.4.46" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.023708][ T29] audit: type=1400 audit(1721616725.305:206): avc: denied { open } for pid=5342 comm="syz.4.46" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.090826][ T29] audit: type=1400 audit(1721616725.355:207): avc: denied { ioctl } for pid=5342 comm="syz.4.46" path="/dev/dri/card0" dev="devtmpfs" ino=629 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.327116][ T29] audit: type=1400 audit(1721616725.535:208): avc: denied { mounton } for pid=5342 comm="syz.4.46" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.437470][ T29] audit: type=1400 audit(1721616725.625:209): avc: denied { bind } for pid=5335 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.551876][ T29] audit: type=1400 audit(1721616725.665:210): avc: denied { write } for pid=5335 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.887247][ T29] audit: type=1400 audit(1721616726.285:211): avc: denied { name_bind } for pid=5356 comm="syz.4.49" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 140.016223][ T29] audit: type=1400 audit(1721616726.395:212): avc: denied { write } for pid=5356 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.559554][ T5162] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.674688][ T29] audit: type=1400 audit(1721616727.075:213): avc: denied { create } for pid=5368 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.924754][ T5162] usb 1-1: config 0 has no interfaces? [ 140.930749][ T5162] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 141.014426][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.091054][ T5162] usb 1-1: config 0 descriptor?? [ 141.213056][ T5370] No control pipe specified [ 142.998347][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 142.998372][ T29] audit: type=1400 audit(1721616729.395:221): avc: denied { write } for pid=5375 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.161962][ T29] audit: type=1400 audit(1721616729.395:222): avc: denied { connect } for pid=5375 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.269984][ T5162] usb 1-1: USB disconnect, device number 3 [ 143.270875][ T29] audit: type=1400 audit(1721616729.395:223): avc: denied { name_connect } for pid=5375 comm="syz.4.56" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 143.297855][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.723437][ T5397] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 143.777542][ T5400] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 143.813180][ T29] audit: type=1400 audit(1721616730.215:224): avc: denied { unmount } for pid=5096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.913005][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.920039][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.755007][ T5420] input: syz0 as /devices/virtual/input/input7 [ 148.256730][ T5430] syz.0.72[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.257077][ T5430] syz.0.72[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.501848][ T5153] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.771173][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.196131][ T5153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.390747][ T5439] hub 6-0:1.0: USB hub found [ 149.402397][ T5439] hub 6-0:1.0: 1 port detected [ 150.332651][ T5153] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.365396][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.390778][ T5442] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 150.453728][ T5153] usb 4-1: config 0 descriptor?? [ 150.490813][ T5153] usb 4-1: can't set config #0, error -71 [ 150.525574][ T5153] usb 4-1: USB disconnect, device number 3 [ 151.733832][ T29] audit: type=1400 audit(1721616737.455:225): avc: denied { ioctl } for pid=5443 comm="syz.3.77" path="mnt:[4026532857]" dev="nsfs" ino=4026532857 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 152.056794][ T5162] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.336285][ T5162] usb 3-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 152.377022][ T5162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.421951][ T5162] usb 3-1: Product: syz [ 152.440732][ T5162] usb 3-1: Manufacturer: syz [ 152.461211][ T5162] usb 3-1: SerialNumber: syz [ 152.505130][ T5162] usb 3-1: config 0 descriptor?? [ 152.883974][ T29] audit: type=1400 audit(1721616739.265:226): avc: denied { execute } for pid=5468 comm="syz.3.87" path="/20/cpuacct.usage_sys" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.885470][ T5465] input: syz0 as /devices/virtual/input/input9 [ 153.049343][ T5101] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 153.987246][ T5101] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 154.188223][ T29] audit: type=1400 audit(1721616740.525:227): avc: denied { read } for pid=5466 comm="syz.0.86" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.338546][ T29] audit: type=1400 audit(1721616740.525:228): avc: denied { open } for pid=5466 comm="syz.0.86" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.362128][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.418906][ T5473] 9pnet_fd: Insufficient options for proto=fd [ 154.507877][ T5481] lo: entered allmulticast mode [ 154.519521][ T29] audit: type=1400 audit(1721616740.795:229): avc: denied { setopt } for pid=5472 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.538522][ T5162] usb 3-1: Found UVC 0.00 device syz (30c9:0093) [ 155.600341][ T5162] usb 3-1: No valid video chain found. [ 156.462400][ T5162] usb 3-1: USB disconnect, device number 2 [ 157.107182][ T5500] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 158.113363][ T5516] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 160.484874][ T29] audit: type=1400 audit(1721616746.885:230): avc: denied { setopt } for pid=5526 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.481951][ T29] audit: type=1400 audit(1721616747.845:231): avc: denied { create } for pid=5526 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 161.618701][ T29] audit: type=1400 audit(1721616748.015:232): avc: denied { write } for pid=5536 comm="syz.0.106" name="net" dev="proc" ino=8566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.710339][ T29] audit: type=1400 audit(1721616748.105:233): avc: denied { add_name } for pid=5536 comm="syz.0.106" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.803176][ T29] audit: type=1400 audit(1721616748.135:234): avc: denied { create } for pid=5536 comm="syz.0.106" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 161.865051][ T29] audit: type=1400 audit(1721616748.135:235): avc: denied { associate } for pid=5536 comm="syz.0.106" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.028797][ T5101] Bluetooth: hci3: unexpected event 0x09 length: 4 > 3 [ 162.214345][ T29] audit: type=1400 audit(1721616748.575:236): avc: denied { bind } for pid=5536 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.244296][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 162.679676][ T29] audit: type=1400 audit(1721616748.585:237): avc: denied { write } for pid=5536 comm="syz.0.106" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.766910][ T29] audit: type=1400 audit(1721616748.585:238): avc: denied { open } for pid=5536 comm="syz.0.106" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.772844][ T5538] bridge2: entered promiscuous mode [ 162.804491][ T5538] bridge2: entered allmulticast mode [ 162.928150][ T29] audit: type=1400 audit(1721616748.595:239): avc: denied { ioctl } for pid=5536 comm="syz.0.106" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.332885][ T5552] fuse: Bad value for 'user_id' [ 163.436552][ T5552] fuse: Bad value for 'user_id' [ 165.033717][ T5577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 165.083720][ T5575] netlink: 56 bytes leftover after parsing attributes in process `syz.0.116'. [ 165.532892][ T4488] Bluetooth: hci5: sending frame failed (-49) [ 165.540569][ T5101] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 165.546119][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 165.642772][ T5584] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 165.712003][ T5584] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 166.167303][ T5591] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 166.193396][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 166.193427][ T29] audit: type=1400 audit(1721616752.595:249): avc: denied { create } for pid=5593 comm="syz.3.122" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 166.321049][ T5590] No control pipe specified [ 166.581334][ T29] audit: type=1400 audit(1721616752.975:250): avc: denied { connect } for pid=5592 comm="syz.0.123" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.848580][ T5594] bridge1: entered promiscuous mode [ 166.881280][ T5594] bridge1: entered allmulticast mode [ 170.591468][ T5615] hub 6-0:1.0: USB hub found [ 170.599226][ T5615] hub 6-0:1.0: 1 port detected [ 171.864005][ T29] audit: type=1400 audit(1721616758.265:251): avc: denied { create } for pid=5617 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.274945][ T5622] netlink: 56 bytes leftover after parsing attributes in process `syz.1.129'. [ 172.483454][ T29] audit: type=1400 audit(1721616758.885:252): avc: denied { create } for pid=5623 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 172.567903][ T5624] 9p: Unknown uid 00000000004294967295 [ 172.574240][ T29] audit: type=1400 audit(1721616758.955:253): avc: denied { getopt } for pid=5623 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 173.346900][ T29] audit: type=1400 audit(1721616759.735:254): avc: denied { shutdown } for pid=5627 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.408479][ T29] audit: type=1400 audit(1721616759.775:255): avc: denied { getopt } for pid=5627 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.823855][ T5640] 9pnet_fd: Insufficient options for proto=fd [ 178.565760][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 178.674172][ T5657] No control pipe specified [ 178.782259][ T5666] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 179.147267][ T29] audit: type=1400 audit(1721616765.545:256): avc: denied { create } for pid=5672 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.278025][ T29] audit: type=1400 audit(1721616765.675:257): avc: denied { create } for pid=5672 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.402098][ T29] audit: type=1400 audit(1721616765.765:258): avc: denied { bind } for pid=5672 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.700988][ T29] audit: type=1400 audit(1721616766.095:259): avc: denied { write } for pid=5667 comm="syz.1.146" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.568337][ T5691] 9pnet_fd: Insufficient options for proto=fd [ 183.855924][ T29] audit: type=1400 audit(1721616770.255:260): avc: denied { mounton } for pid=5702 comm="syz.4.156" path="/proc/115/task" dev="proc" ino=8845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 184.812589][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 185.320944][ T29] audit: type=1400 audit(1721616771.685:261): avc: denied { create } for pid=5713 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.485185][ T29] audit: type=1400 audit(1721616771.695:262): avc: denied { write } for pid=5713 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.645147][ T5712] No control pipe specified [ 187.506174][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 187.522308][ T5733] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 187.554767][ T47] Bluetooth: hci5: Frame reassembly failed (-90) [ 187.602340][ T5733] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 187.773068][ T5745] ubi0: attaching mtd0 [ 187.847163][ T5745] ubi0: scanning is finished [ 187.918421][ T5746] Bluetooth: MGMT ver 1.23 [ 187.953935][ T29] audit: type=1400 audit(1721616774.315:263): avc: denied { bind } for pid=5744 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.991804][ T5745] ubi0: empty MTD device detected [ 188.045877][ T29] audit: type=1400 audit(1721616774.315:264): avc: denied { write } for pid=5744 comm="syz.0.171" path="socket:[8911]" dev="sockfs" ino=8911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.180998][ T5742] input: syz0 as /devices/virtual/input/input11 [ 188.289567][ T29] audit: type=1400 audit(1721616774.685:265): avc: denied { map } for pid=5749 comm="syz.4.172" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 188.479179][ T29] audit: type=1400 audit(1721616774.875:266): avc: denied { setopt } for pid=5749 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 188.501864][ T5745] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 188.535784][ T5745] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 188.545350][ T29] audit: type=1400 audit(1721616774.945:267): avc: denied { ioctl } for pid=5749 comm="syz.4.172" path="socket:[9437]" dev="sockfs" ino=9437 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 188.596843][ T5745] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 188.615260][ T5745] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 188.687490][ T29] audit: type=1400 audit(1721616775.005:268): avc: denied { getopt } for pid=5749 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.691734][ T5745] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 188.761599][ T5745] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 188.824018][ T5745] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4010605655 [ 188.881942][ T29] audit: type=1400 audit(1721616775.275:269): avc: denied { create } for pid=5749 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.902063][ T5745] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 188.961012][ T5754] ubi0: background thread "ubi_bgt0d" started, PID 5754 [ 188.988755][ T29] audit: type=1400 audit(1721616775.325:270): avc: denied { bind } for pid=5749 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.216692][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 189.244242][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 189.492226][ T4488] Bluetooth: hci5: command 0xfc11 tx timeout [ 189.492276][ T5101] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 190.065118][ T5774] nbd: must specify at least one socket [ 190.903590][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 190.903615][ T29] audit: type=1400 audit(1721616777.285:274): avc: denied { mount } for pid=5781 comm="syz.2.182" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 190.932907][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.001070][ T29] audit: type=1400 audit(1721616777.395:275): avc: denied { mount } for pid=5783 comm="syz.3.183" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 191.261803][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 191.558363][ T29] audit: type=1400 audit(1721616777.945:276): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 193.587570][ T5793] input: syz0 as /devices/virtual/input/input12 [ 194.562889][ T29] audit: type=1400 audit(1721616780.205:277): avc: denied { watch } for pid=5808 comm="syz.1.189" path="/35/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.685868][ T29] audit: type=1400 audit(1721616780.215:278): avc: denied { read } for pid=5808 comm="syz.1.189" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 194.825276][ T29] audit: type=1400 audit(1721616780.215:279): avc: denied { open } for pid=5808 comm="syz.1.189" path="/dev/rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 194.970483][ T29] audit: type=1400 audit(1721616780.225:280): avc: denied { ioctl } for pid=5808 comm="syz.1.189" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.815690][ T5820] sched: RT throttling activated [ 197.278764][ T29] audit: type=1400 audit(1721616783.615:281): avc: denied { block_suspend } for pid=5818 comm="syz.1.192" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.105841][ T5836] netlink: 10 bytes leftover after parsing attributes in process `syz.2.196'. [ 199.115829][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 199.132194][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 199.758627][ T5843] SELinux: failed to load policy [ 199.791603][ T29] audit: type=1400 audit(1721616786.155:282): avc: denied { load_policy } for pid=5842 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 205.340873][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.350495][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.747757][ T5890] ubi: mtd0 is already attached to ubi0 [ 206.233965][ T29] audit: type=1400 audit(1721616792.625:283): avc: denied { checkpoint_restore } for pid=5898 comm="syz.0.215" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.356844][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 206.422756][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 208.067911][ T29] audit: type=1400 audit(1721616794.465:284): avc: denied { read } for pid=5915 comm="syz.2.222" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 208.136905][ T29] audit: type=1400 audit(1721616794.465:285): avc: denied { open } for pid=5915 comm="syz.2.222" path="/48/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 209.679132][ T29] audit: type=1400 audit(1721616795.795:286): avc: denied { name_connect } for pid=5927 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 211.746817][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 211.756673][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 211.766367][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 212.069557][ T5959] syz.0.236 uses obsolete (PF_INET,SOCK_PACKET) [ 212.508854][ T4488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.529813][ T4488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.538882][ T4488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.557874][ T4488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.572157][ T4488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.579967][ T4488] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.609778][ T29] audit: type=1400 audit(1721616798.995:287): avc: denied { mounton } for pid=5960 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 213.012761][ T2447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.368411][ T2447] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 213.417343][ T2447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.631920][ T4488] Bluetooth: hci5: command tx timeout [ 214.660721][ T2447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.269456][ T29] audit: type=1400 audit(1721616801.495:288): avc: denied { mount } for pid=5978 comm="syz.0.242" name="/" dev="ramfs" ino=9892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 215.507480][ T2447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.321851][ T29] audit: type=1400 audit(1721616802.695:289): avc: denied { unmount } for pid=5093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 216.694788][ T4488] Bluetooth: hci5: command tx timeout [ 218.048214][ T29] audit: type=1400 audit(1721616804.435:290): avc: denied { search } for pid=4758 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.180186][ T5996] netlink: 100 bytes leftover after parsing attributes in process `syz.0.246'. [ 218.236647][ T29] audit: type=1400 audit(1721616804.435:291): avc: denied { read } for pid=4758 comm="dhcpcd" name="n68" dev="tmpfs" ino=2412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.264836][ T2447] bridge_slave_1: left allmulticast mode [ 218.271117][ T2447] bridge_slave_1: left promiscuous mode [ 218.342728][ T5998] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 218.346384][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.350040][ T5998] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.388382][ T29] audit: type=1400 audit(1721616804.435:292): avc: denied { open } for pid=4758 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.411522][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.509769][ T29] audit: type=1400 audit(1721616804.435:293): avc: denied { getattr } for pid=4758 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.513250][ T2447] bridge_slave_0: left allmulticast mode [ 218.532925][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.817543][ T4488] Bluetooth: hci5: command tx timeout [ 220.182832][ T29] audit: type=1400 audit(1721616804.575:294): avc: denied { nlmsg_write } for pid=5995 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.214729][ T5998] vhci_hcd vhci_hcd.0: Device attached [ 220.267837][ T2447] bridge_slave_0: left promiscuous mode [ 220.331707][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.369695][ T5999] vhci_hcd: connection closed [ 220.376971][ T29] audit: type=1400 audit(1721616804.895:295): avc: denied { read write } for pid=5995 comm="syz.0.246" name="vhost-vsock" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.406921][ T61] vhci_hcd: stop threads [ 220.449608][ T46] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 220.450515][ T61] vhci_hcd: release socket [ 220.487407][ T29] audit: type=1400 audit(1721616804.895:296): avc: denied { open } for pid=5995 comm="syz.0.246" path="/dev/vhost-vsock" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.523596][ T61] vhci_hcd: disconnect device [ 220.611923][ T29] audit: type=1400 audit(1721616804.965:297): avc: denied { ioctl } for pid=5995 comm="syz.0.246" path="/dev/vhost-vsock" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.747839][ T29] audit: type=1400 audit(1721616805.235:298): avc: denied { search } for pid=4526 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.851911][ T4488] Bluetooth: hci5: command tx timeout [ 220.932238][ T29] audit: type=1400 audit(1721616805.415:299): avc: denied { mount } for pid=6004 comm="syz.3.248" name="/" dev="autofs" ino=10641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 221.043012][ T5151] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 221.281763][ T5151] usb 5-1: Using ep0 maxpacket: 16 [ 221.325499][ T5151] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 221.364348][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.387606][ T5151] usb 5-1: Product: syz [ 221.402023][ T5151] usb 5-1: Manufacturer: syz [ 221.406711][ T5151] usb 5-1: SerialNumber: syz [ 221.459708][ T5151] usb 5-1: config 0 descriptor?? [ 222.437997][ T5150] usb 5-1: USB disconnect, device number 2 [ 223.911767][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 223.911793][ T29] audit: type=1400 audit(1721616810.315:313): avc: denied { remove_name } for pid=6054 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.091305][ T29] audit: type=1400 audit(1721616810.315:314): avc: denied { unlink } for pid=6054 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 225.634592][ T2447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.714107][ T2447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.771258][ T2447] bond0 (unregistering): Released all slaves [ 225.965565][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 226.111978][ T46] vhci_hcd: vhci_device speed not set [ 226.534304][ T29] audit: type=1400 audit(1721616812.935:315): avc: denied { create } for pid=6078 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 226.586679][ T29] audit: type=1400 audit(1721616812.985:316): avc: denied { getopt } for pid=6078 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 227.172640][ T6087] netlink: 198180 bytes leftover after parsing attributes in process `syz.4.269'. [ 227.325140][ T29] audit: type=1400 audit(1721616813.695:317): avc: denied { create } for pid=6084 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 228.899662][ T2447] hsr_slave_0: left promiscuous mode [ 228.957577][ T2447] hsr_slave_1: left promiscuous mode [ 229.044087][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.058346][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.091095][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.091268][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.119770][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.133556][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.143598][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.226578][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.284377][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.333123][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.511475][ T2447] veth1_macvtap: left promiscuous mode [ 229.560587][ T2447] veth0_macvtap: left promiscuous mode [ 229.584673][ T2447] veth1_vlan: left promiscuous mode [ 229.590572][ T2447] veth0_vlan: left promiscuous mode [ 231.079292][ T2447] team0 (unregistering): Port device team_slave_1 removed [ 231.172439][ T5111] Bluetooth: hci0: command tx timeout [ 231.210126][ T2447] team0 (unregistering): Port device team_slave_0 removed [ 231.797622][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.806086][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.813913][ T5960] bridge_slave_0: entered allmulticast mode [ 231.824396][ T5960] bridge_slave_0: entered promiscuous mode [ 231.834831][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.842372][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.849669][ T5960] bridge_slave_1: entered allmulticast mode [ 231.873312][ T5960] bridge_slave_1: entered promiscuous mode [ 232.213720][ T6133] netlink: 100 bytes leftover after parsing attributes in process `syz.3.277'. [ 232.269839][ T6133] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 232.276454][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.444842][ T6133] vhci_hcd vhci_hcd.0: Device attached [ 232.903632][ T5149] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 233.015608][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.021828][ T5111] Bluetooth: hci1: command 0x0406 tx timeout [ 233.030954][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 233.037537][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 233.099301][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.138502][ T6137] vhci_hcd: connection reset by peer [ 233.147344][ T61] vhci_hcd: stop threads [ 233.151829][ T61] vhci_hcd: release socket [ 233.156617][ T61] vhci_hcd: disconnect device [ 233.427598][ T4488] Bluetooth: hci0: command tx timeout [ 235.589971][ T4488] Bluetooth: hci0: command tx timeout [ 235.609315][ T5960] team0: Port device team_slave_0 added [ 235.704096][ T5960] team0: Port device team_slave_1 added [ 237.637908][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.659411][ T4488] Bluetooth: hci0: command tx timeout [ 237.677145][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.862113][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.970005][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.021715][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.129738][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.132984][ T5149] vhci_hcd: vhci_device speed not set [ 239.299797][ T29] audit: type=1400 audit(1721616825.695:318): avc: denied { ioctl } for pid=6176 comm="syz.0.285" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10913 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 239.608880][ T5960] hsr_slave_0: entered promiscuous mode [ 239.687033][ T5960] hsr_slave_1: entered promiscuous mode [ 239.710545][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.741963][ T5960] Cannot create hsr debugfs directory [ 239.821968][ T6174] input: syz0 as /devices/virtual/input/input13 [ 240.326834][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 240.558388][ T6201] netlink: 100 bytes leftover after parsing attributes in process `syz.3.289'. [ 240.604145][ T2447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.048010][ T2447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.962557][ T2447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.936336][ T6210] nbd: must specify at least one socket [ 242.977903][ T29] audit: type=1326 audit(1721616829.375:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8907575b59 code=0x0 [ 244.675844][ T2447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.999878][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.028061][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.036701][ T6100] bridge_slave_0: entered allmulticast mode [ 245.046394][ T6100] bridge_slave_0: entered promiscuous mode [ 245.141297][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.150370][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.158685][ T6100] bridge_slave_1: entered allmulticast mode [ 245.215226][ T6100] bridge_slave_1: entered promiscuous mode [ 245.496997][ T29] audit: type=1400 audit(1721616831.895:320): avc: denied { bind } for pid=6230 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.667684][ T4488] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 246.364476][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.615802][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.191551][ T6100] team0: Port device team_slave_0 added [ 247.246144][ T6100] team0: Port device team_slave_1 added [ 247.343204][ T29] audit: type=1400 audit(1721616833.745:321): avc: denied { ioctl } for pid=6247 comm="syz.1.299" path="socket:[11096]" dev="sockfs" ino=11096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.464763][ T29] audit: type=1400 audit(1721616833.775:322): avc: denied { bind } for pid=6247 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.503449][ T2447] bridge_slave_1: left allmulticast mode [ 247.612393][ T2447] bridge_slave_1: left promiscuous mode [ 247.618445][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.838369][ T2447] bridge_slave_0: left allmulticast mode [ 248.402768][ T2447] bridge_slave_0: left promiscuous mode [ 248.408744][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.930816][ T29] audit: type=1400 audit(1721616835.325:323): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 250.246441][ T6275] nbd: must specify at least one socket [ 250.260851][ T29] audit: type=1326 audit(1721616836.655:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a49775b59 code=0x0 [ 250.362610][ T2447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.385032][ T2447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.410184][ T2447] bond0 (unregistering): Released all slaves [ 251.045494][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.055286][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.081308][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.088799][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.267655][ T29] audit: type=1400 audit(1721616837.665:325): avc: denied { setrlimit } for pid=6286 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 251.371863][ T29] audit: type=1400 audit(1721616837.765:326): avc: denied { unlink } for pid=6288 comm="syz.1.307" name="#1" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 251.475222][ T29] audit: type=1400 audit(1721616837.865:327): avc: denied { mount } for pid=6288 comm="syz.1.307" name="/" dev="overlay" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 251.699329][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.741020][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.767029][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.826570][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.341179][ T6100] hsr_slave_0: entered promiscuous mode [ 252.351276][ T6100] hsr_slave_1: entered promiscuous mode [ 253.604229][ T6100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.661440][ T6100] Cannot create hsr debugfs directory [ 254.284596][ T2447] hsr_slave_0: left promiscuous mode [ 254.306412][ T2447] hsr_slave_1: left promiscuous mode [ 254.327073][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.341928][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.363958][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.371461][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.486580][ T2447] veth1_macvtap: left promiscuous mode [ 254.507255][ T2447] veth0_macvtap: left promiscuous mode [ 254.526220][ T2447] veth1_vlan: left promiscuous mode [ 254.552032][ T2447] veth0_vlan: left promiscuous mode [ 255.945056][ T2447] team0 (unregistering): Port device team_slave_1 removed [ 256.069311][ T2447] team0 (unregistering): Port device team_slave_0 removed [ 257.301398][ T29] audit: type=1400 audit(1721616843.705:328): avc: denied { mount } for pid=6328 comm="syz.1.321" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 257.443438][ T29] audit: type=1400 audit(1721616843.835:329): avc: denied { unmount } for pid=5094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 257.711247][ T2447] lo (unregistering): left allmulticast mode [ 257.942087][ T6324] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 258.517285][ T29] audit: type=1400 audit(1721616844.885:330): avc: denied { setopt } for pid=6339 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.702803][ T5960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.871275][ T5960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.293031][ T5960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.383301][ T5960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.374893][ T4488] Bluetooth: hci1: unexpected cc 0x1407 length: 100 > 9 [ 262.080636][ T29] audit: type=1400 audit(1721616848.475:331): avc: denied { read } for pid=6367 comm="syz.0.332" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 262.238012][ T6100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.312164][ T6100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.362970][ T29] audit: type=1400 audit(1721616848.745:332): avc: denied { write } for pid=6383 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.387325][ T6100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.459265][ T6100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.583676][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.066701][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.153334][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.161426][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.288271][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.295720][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.289721][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.490102][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.516416][ T29] audit: type=1400 audit(1721616850.915:333): avc: denied { read } for pid=6398 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.654794][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.662233][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.705051][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.712413][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.963168][ T29] audit: type=1400 audit(1721616851.355:334): avc: denied { name_bind } for pid=6416 comm="syz.3.341" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 265.155622][ T6100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.365687][ T29] audit: type=1400 audit(1721616851.765:335): avc: denied { write } for pid=6420 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.392925][ T6428] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.422682][ T4488] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 265.432788][ T4488] Bluetooth: hci1: Injecting HCI hardware error event [ 265.445335][ T5110] Bluetooth: hci1: hardware error 0x00 [ 265.500424][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.521774][ T5153] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 265.721699][ T5153] usb 4-1: Using ep0 maxpacket: 32 [ 265.751958][ T5153] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 265.809438][ T5153] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.812376][ T5960] veth0_vlan: entered promiscuous mode [ 265.873575][ T5153] usb 4-1: config 1 interface 0 has no altsetting 0 [ 265.930002][ T5153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 265.972326][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.983235][ T5153] usb 4-1: Product: syz [ 265.987486][ T5153] usb 4-1: Manufacturer: syz [ 266.046872][ T5960] veth1_vlan: entered promiscuous mode [ 266.051870][ T5153] usb 4-1: SerialNumber: syz [ 266.087281][ T6427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.108808][ T6427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.432571][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.441544][ T29] audit: type=1400 audit(1721616852.835:336): avc: denied { create } for pid=6440 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.461370][ T6417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=6417 comm=syz.3.341 [ 266.541354][ T5960] veth0_macvtap: entered promiscuous mode [ 266.582104][ T6417] netlink: 'syz.3.341': attribute type 4 has an invalid length. [ 266.795850][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.798923][ T5960] veth1_macvtap: entered promiscuous mode [ 266.802368][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.968369][ T5153] usb 4-1: USB disconnect, device number 4 [ 266.996517][ T6447] input: syz1 as /devices/virtual/input/input14 [ 267.093871][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.131868][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.204699][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.231696][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.261798][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.277790][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.330334][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.444079][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.493209][ T5110] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 267.500417][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.535805][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.557095][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.588120][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.599652][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.614889][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.649887][ T5960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.690125][ T5960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.757080][ T5960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.794334][ T5960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.245646][ T5110] Bluetooth: hci4: unexpected cc 0x1407 length: 100 > 9 [ 268.253830][ T5110] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 268.356386][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.405059][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.440656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.505417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.827236][ T6100] veth0_vlan: entered promiscuous mode [ 268.963474][ T6100] veth1_vlan: entered promiscuous mode [ 269.160765][ T6100] veth0_macvtap: entered promiscuous mode [ 269.165679][ T29] audit: type=1400 audit(1721616855.525:337): avc: denied { connect } for pid=6478 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.208515][ T6100] veth1_macvtap: entered promiscuous mode [ 269.327088][ T29] audit: type=1400 audit(1721616855.715:338): avc: denied { shutdown } for pid=6478 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.374030][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 269.385951][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 269.441275][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.471756][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.523943][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.554341][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.590273][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.618448][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.647785][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.679451][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.699150][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.730928][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.750865][ T6482] Bluetooth: MGMT ver 1.23 [ 269.761183][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.812419][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.843415][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.884142][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.918785][ T6492] input: syz0 as /devices/virtual/input/input15 [ 269.930112][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.024888][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.056136][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.123290][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.262399][ T6100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.285093][ T29] audit: type=1400 audit(1721616856.685:339): avc: denied { bind } for pid=6495 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 270.317240][ T6100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.359918][ T29] audit: type=1400 audit(1721616856.715:340): avc: denied { accept } for pid=6495 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 270.375893][ T6100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.410330][ T6100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.476956][ T29] audit: type=1400 audit(1721616856.715:341): avc: denied { read } for pid=6495 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.292715][ T5110] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 272.302746][ T5110] Bluetooth: hci4: Injecting HCI hardware error event [ 272.312014][ T5110] Bluetooth: hci4: hardware error 0x00 [ 273.081042][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.114337][ T29] audit: type=1400 audit(1721616859.495:342): avc: denied { connect } for pid=6522 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.162349][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.269665][ T29] audit: type=1400 audit(1721616859.585:343): avc: denied { setopt } for pid=6522 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.356246][ T6511] input: syz0 as /devices/virtual/input/input16 [ 273.448729][ T3852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.474551][ T3852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.676453][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 273.706309][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 273.917827][ T4488] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 274.026979][ T29] audit: type=1326 audit(1721616860.425:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4921d75b59 code=0x0 [ 274.771191][ T5110] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 275.515550][ T6561] netlink: 596 bytes leftover after parsing attributes in process `syz.2.368'. [ 275.578823][ T6563] ------------[ cut here ]------------ [ 275.585228][ T6563] WARNING: CPU: 0 PID: 6563 at include/net/mac80211.h:6993 minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 275.597051][ T6563] Modules linked in: [ 275.601044][ T6563] CPU: 0 PID: 6563 Comm: syz.1.369 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 275.610992][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 275.621685][ T6563] RIP: 0010:minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 275.629380][ T6563] Code: 03 0f 8e 49 07 00 00 44 89 f6 89 df 45 8b 6c 24 10 e8 2a 1c 0b f7 44 39 f3 0f 8c dc f3 ff ff 4c 8b 64 24 10 e8 d7 21 0b f7 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 [ 275.649411][ T6563] RSP: 0018:ffffc9000376f1b0 EFLAGS: 00010283 [ 275.655669][ T6563] RAX: 0000000000004280 RBX: 000000000000000c RCX: ffffc9000a541000 [ 275.663910][ T6563] RDX: 0000000000040000 RSI: ffffffff8a7f2f59 RDI: 0000000000000004 [ 275.672006][ T6563] RBP: dffffc0000000000 R08: 0000000000000004 R09: 000000000000000c [ 275.680057][ T6563] R10: 000000000000000c R11: 0000000000000000 R12: ffff88807ab4dc38 [ 275.688202][ T6563] R13: 0000000000000000 R14: 000000000000000c R15: ffffed100f56961c [ 275.696320][ T6563] FS: 00007fad61d106c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 275.705450][ T6563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.712241][ T6563] CR2: 0000000020001080 CR3: 0000000064eda000 CR4: 00000000003506f0 [ 275.720312][ T6563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.728409][ T6563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.736699][ T6563] Call Trace: [ 275.740043][ T6563] [ 275.743077][ T6563] ? show_regs+0x8c/0xa0 [ 275.747455][ T6563] ? __warn+0xe5/0x3c0 [ 275.751684][ T6563] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 275.758637][ T6563] ? report_bug+0x3c0/0x580 [ 275.763283][ T6563] ? handle_bug+0x3d/0x70 [ 275.767692][ T6563] ? exc_invalid_op+0x17/0x50 [ 275.772530][ T6563] ? asm_exc_invalid_op+0x1a/0x20 [ 275.777750][ T6563] ? minstrel_ht_update_caps.constprop.0+0xff9/0x1a90 [ 275.784773][ T6563] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 275.791711][ T6563] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 275.797176][ T6563] rate_control_rate_init+0x2fa/0x690 [ 275.802706][ T6563] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 275.809054][ T6563] sta_apply_parameters+0xb6e/0x1740 [ 275.814630][ T6563] ieee80211_add_station+0x3fa/0x6c0 [ 275.820474][ T6563] nl80211_new_station+0x146d/0x1bf0 [ 275.825939][ T6563] ? __rtnl_unlock+0x68/0xf0 [ 275.830638][ T6563] ? __pfx_nl80211_new_station+0x10/0x10 [ 275.836440][ T6563] ? ref_tracker_alloc+0x2ef/0x5b0 [ 275.841774][ T6563] ? nl80211_pre_doit+0x1b0/0xb10 [ 275.846883][ T6563] genl_family_rcv_msg_doit+0x202/0x2f0 [ 275.852585][ T6563] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.858757][ T6563] ? ns_capable+0xd7/0x110 [ 275.863337][ T6563] genl_rcv_msg+0x565/0x800 [ 275.867937][ T6563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.873102][ T6563] ? __pfx___lock_acquire+0x10/0x10 [ 275.878384][ T6563] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 275.884008][ T6563] ? __pfx_nl80211_new_station+0x10/0x10 [ 275.889829][ T6563] ? __pfx_nl80211_post_doit+0x10/0x10 [ 275.895470][ T6563] netlink_rcv_skb+0x16b/0x440 [ 275.900449][ T6563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.905653][ T6563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.911036][ T6563] ? down_read+0xc9/0x330 [ 275.915714][ T6563] ? __pfx_down_read+0x10/0x10 [ 275.920664][ T6563] ? netlink_deliver_tap+0x1ae/0xd90 [ 275.926111][ T6563] genl_rcv+0x28/0x40 [ 275.930196][ T6563] netlink_unicast+0x544/0x830 [ 275.935202][ T6563] ? __pfx_netlink_unicast+0x10/0x10 [ 275.940664][ T6563] netlink_sendmsg+0x8b8/0xd70 [ 275.945680][ T6563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.951235][ T6563] ? __import_iovec+0x1fd/0x6e0 [ 275.956256][ T6563] ____sys_sendmsg+0xab5/0xc90 [ 275.961188][ T6563] ? copy_msghdr_from_user+0x10b/0x160 [ 275.966936][ T6563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.972489][ T6563] ? __pfx___futex_wait+0x10/0x10 [ 275.977624][ T6563] ? __pfx___lock_acquire+0x10/0x10 [ 275.983076][ T6563] ? try_to_wake_up+0x14b/0x13e0 [ 275.988118][ T6563] ___sys_sendmsg+0x135/0x1e0 [ 275.992971][ T6563] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.998458][ T6563] ? __fget_light+0x173/0x210 [ 276.003319][ T6563] __sys_sendmsg+0x117/0x1f0 [ 276.008101][ T6563] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.013378][ T6563] ? __x64_sys_futex+0x1e1/0x4c0 [ 276.018579][ T6563] do_syscall_64+0xcd/0x250 [ 276.023479][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.029669][ T6563] RIP: 0033:0x7fad60f75b59 [ 276.034259][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.054013][ T6563] RSP: 002b:00007fad61d10048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.062698][ T6563] RAX: ffffffffffffffda RBX: 00007fad61106038 RCX: 00007fad60f75b59 [ 276.070765][ T6563] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 276.078991][ T6563] RBP: 00007fad60fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 276.087191][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.095394][ T6563] R13: 000000000000006e R14: 00007fad61106038 R15: 00007ffd0cf2c678 [ 276.101838][ T29] audit: type=1400 audit(1721616862.365:345): avc: denied { write } for pid=4526 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.103542][ T6563] [ 276.103652][ T6563] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.103671][ T6563] CPU: 0 PID: 6563 Comm: syz.1.369 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 276.103711][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 276.103733][ T6563] Call Trace: [ 276.103747][ T6563] [ 276.103760][ T6563] dump_stack_lvl+0x3d/0x1f0 [ 276.103814][ T6563] panic+0x6f5/0x7a0 [ 276.103853][ T6563] ? __pfx_panic+0x10/0x10 [ 276.103891][ T6563] ? show_trace_log_lvl+0x363/0x500 [ 276.103955][ T6563] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 276.104019][ T6563] check_panic_on_warn+0xab/0xb0 [ 276.104061][ T6563] __warn+0xf1/0x3c0 [ 276.104101][ T6563] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 276.104164][ T6563] report_bug+0x3c0/0x580 [ 276.104208][ T6563] handle_bug+0x3d/0x70 [ 276.104244][ T6563] exc_invalid_op+0x17/0x50 [ 276.104281][ T6563] asm_exc_invalid_op+0x1a/0x20 [ 276.104326][ T6563] RIP: 0010:minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 276.104392][ T6563] Code: 03 0f 8e 49 07 00 00 44 89 f6 89 df 45 8b 6c 24 10 e8 2a 1c 0b f7 44 39 f3 0f 8c dc f3 ff ff 4c 8b 64 24 10 e8 d7 21 0b f7 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 [ 276.104428][ T6563] RSP: 0018:ffffc9000376f1b0 EFLAGS: 00010283 [ 276.104460][ T6563] RAX: 0000000000004280 RBX: 000000000000000c RCX: ffffc9000a541000 [ 276.104485][ T6563] RDX: 0000000000040000 RSI: ffffffff8a7f2f59 RDI: 0000000000000004 [ 276.104510][ T6563] RBP: dffffc0000000000 R08: 0000000000000004 R09: 000000000000000c [ 276.104534][ T6563] R10: 000000000000000c R11: 0000000000000000 R12: ffff88807ab4dc38 [ 276.104558][ T6563] R13: 0000000000000000 R14: 000000000000000c R15: ffffed100f56961c [ 276.104587][ T6563] ? minstrel_ht_update_caps.constprop.0+0xff9/0x1a90 [ 276.104661][ T6563] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.104716][ T6563] rate_control_rate_init+0x2fa/0x690 [ 276.104762][ T6563] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 276.104807][ T6563] sta_apply_parameters+0xb6e/0x1740 [ 276.104857][ T6563] ieee80211_add_station+0x3fa/0x6c0 [ 276.104906][ T6563] nl80211_new_station+0x146d/0x1bf0 [ 276.104960][ T6563] ? __rtnl_unlock+0x68/0xf0 [ 276.105006][ T6563] ? __pfx_nl80211_new_station+0x10/0x10 [ 276.105057][ T6563] ? ref_tracker_alloc+0x2ef/0x5b0 [ 276.105102][ T6563] ? nl80211_pre_doit+0x1b0/0xb10 [ 276.105146][ T6563] genl_family_rcv_msg_doit+0x202/0x2f0 [ 276.105193][ T6563] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 276.105242][ T6563] ? ns_capable+0xd7/0x110 [ 276.105293][ T6563] genl_rcv_msg+0x565/0x800 [ 276.105361][ T6563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.105400][ T6563] ? __pfx___lock_acquire+0x10/0x10 [ 276.105442][ T6563] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 276.105484][ T6563] ? __pfx_nl80211_new_station+0x10/0x10 [ 276.105534][ T6563] ? __pfx_nl80211_post_doit+0x10/0x10 [ 276.105598][ T6563] netlink_rcv_skb+0x16b/0x440 [ 276.105643][ T6563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.105687][ T6563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.105730][ T6563] ? down_read+0xc9/0x330 [ 276.105785][ T6563] ? __pfx_down_read+0x10/0x10 [ 276.105840][ T6563] ? netlink_deliver_tap+0x1ae/0xd90 [ 276.105901][ T6563] genl_rcv+0x28/0x40 [ 276.105939][ T6563] netlink_unicast+0x544/0x830 [ 276.105978][ T6563] ? __pfx_netlink_unicast+0x10/0x10 [ 276.106018][ T6563] netlink_sendmsg+0x8b8/0xd70 [ 276.106057][ T6563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.106094][ T6563] ? __import_iovec+0x1fd/0x6e0 [ 276.106155][ T6563] ____sys_sendmsg+0xab5/0xc90 [ 276.106194][ T6563] ? copy_msghdr_from_user+0x10b/0x160 [ 276.106247][ T6563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.106286][ T6563] ? __pfx___futex_wait+0x10/0x10 [ 276.106332][ T6563] ? __pfx___lock_acquire+0x10/0x10 [ 276.106374][ T6563] ? try_to_wake_up+0x14b/0x13e0 [ 276.106419][ T6563] ___sys_sendmsg+0x135/0x1e0 [ 276.106471][ T6563] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.106534][ T6563] ? __fget_light+0x173/0x210 [ 276.106579][ T6563] __sys_sendmsg+0x117/0x1f0 [ 276.106640][ T6563] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.106694][ T6563] ? __x64_sys_futex+0x1e1/0x4c0 [ 276.106741][ T6563] do_syscall_64+0xcd/0x250 [ 276.106800][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.106848][ T6563] RIP: 0033:0x7fad60f75b59 [ 276.106876][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.106912][ T6563] RSP: 002b:00007fad61d10048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.106949][ T6563] RAX: ffffffffffffffda RBX: 00007fad61106038 RCX: 00007fad60f75b59 [ 276.106976][ T6563] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 276.107000][ T6563] RBP: 00007fad60fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 276.107025][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.107049][ T6563] R13: 000000000000006e R14: 00007fad61106038 R15: 00007ffd0cf2c678 [ 276.107080][ T6563] [ 276.126995][ T6563] Kernel Offset: disabled