last executing test programs: 14.676115595s ago: executing program 4 (id=5): bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x1, 0x8009, 0x6, 0x2, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 14.317207277s ago: executing program 4 (id=14): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x8905, 0x0) 14.317126562s ago: executing program 1 (id=2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008014}, 0x40050) 14.222649308s ago: executing program 0 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 14.089226635s ago: executing program 1 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000020c0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x820}, 0x4000) 13.965460716s ago: executing program 0 (id=18): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="900000000000000019010000169e5ecf3894c820d79d2233126c89ec79cf5953bae8d1ae16fcee7f108b8ddb5eec3c5a200eb23def7bb7a289685316e4eedddea70abfa155078bbb5aec6726032e5d3bada62aee58387df3d32131212fdae5bf2eedca073998b2bbae9c2e21a90dc003a0ffaa4a5ad0447b3059ad41bf300cafc2cc35517b34738275e7a85800000000b0000000000000000000000002"], 0x488}, 0x800) 13.963562716s ago: executing program 4 (id=19): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x20, 0x3, 0x2c, {0x2c, 0x4, "29330dc778c7a4cae9a4c9e0bb43bbd22455bab20469efa3042a078a03501649b1882fd066cbc6ce9bbc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 13.889663323s ago: executing program 1 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x7f}]}}}}}}}, 0x0) 13.773406246s ago: executing program 0 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x30, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r1}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="33e1d16d"]}]}, 0x30}], 0x1}, 0x0) 13.759292423s ago: executing program 0 (id=24): r0 = socket(0x28, 0x1, 0x0) connect$packet(r0, &(0x7f0000000100)={0x28}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 13.492084548s ago: executing program 1 (id=27): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap, 0x41}]}}) 13.397459438s ago: executing program 0 (id=28): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) 12.99233837s ago: executing program 2 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0xd, 0x10}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x2}}]}]}]}, 0x3c}}, 0x4080000) 12.90222798s ago: executing program 0 (id=30): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1, {r2}}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xb) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000440)=""/4096, &(0x7f0000000180)="89c68c258cdd4633bbf3f08a1ea152cf74a9539df7a1ba0cb1d50e9daeb01949b211c6c7ae1894201df6204b67972200c9ddcfe50d64f79dc22b20952173d411fcb84af5318114261f9ef695cd613932b7634ca9688959e6bd4a7873de01b7cde392eed91c0154279c5262d6b839", &(0x7f0000000200)="1b2d76769840f6edc6cec2f1bc839043eb63785c0943f352b4409523fc4bd2bfb72b8b1f7717a04060f0e35373a0794904000000ccbff718a9bbf59c778443021fbbc644c12b01560a751442633cfbc26669630aabbae83a2788cacc40918a995ffde8e377ae0d82bc9f1ae7ebcc3269638fc96b6883de696da3837797a7776fb3e32c337e7824965d88e76a0eb454527ada1bd511c5024060ecfc0e79d90ba7d3e69dede3d3f915e44d6870f5b1d593b51c4bed92d2027ea91fe7d9452a6c61db5e6e1d67bb59154843c38a93680608a1da713839ac13a771f2172d5bcea62f4c5f819c7bca22d5f311502259ba5b3ca5fe87", 0xa5, 0x1, 0x4}, 0x38) socket$unix(0x1, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair(0x9, 0x805, 0x465, &(0x7f0000000100)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket(0x2, 0x3, 0x9) 12.42940195s ago: executing program 2 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) 11.333402863s ago: executing program 1 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) 11.33324699s ago: executing program 2 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.289276997s ago: executing program 3 (id=34): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 9.989339213s ago: executing program 4 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.625352937s ago: executing program 1 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8055}, 0x4000) 9.54954918s ago: executing program 3 (id=37): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000408d0450ce00000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.478917457s ago: executing program 4 (id=38): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1000, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x70, [0x5, 0x1, 0xee, 0x17a0, 0x8, 0x7, 0x7, 0xb1f, 0xd, 0x100, 0x0, 0x8aef, 0x1d6f, 0x6, 0x8, 0x5, 0x3, 0x0, 0x8, 0x4, 0x7, 0x1ff, 0x1, 0x81, 0xc, 0x8, 0xb, 0x4, 0x1, 0x4, 0x8, 0x83, 0xfc86, 0x7, 0x0, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x5, 0x7b1a, 0x400, 0x9, 0x101, 0x2, 0x3ff, 0x8], 0x81}}) 8.990218209s ago: executing program 4 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009046ce7010300000009"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x2000000, 0x12) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x10, 0xf8, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x1, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x80, 0x60}}]}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x300, 0x9, 0x6, 0x3e, 0xff, 0xff}, 0x191, &(0x7f0000000a00)={0x5, 0xf, 0x191, 0x3, [@ptm_cap={0x3}, @generic={0xdd, 0x10, 0x2, "e4d073d937088a93590589d988c67193e5b408c08ab1e181f088e2245e419f3423104f29edfcdb0be6d700a2dce655880dbb4bf06c734e15ce099e97b2813e18c189f79f610da9279433d73e792e0650071c7add8092a4690b39f8da6a991bc87caa8e277618d52894f91a97d13ef6ffb6bf23f4c3ef527e9f7d0ef79be94c81e58caa6cc214f2e6492454e181611bdb74e20b31a9f7d13347115c11afc8d679c00a2795ea19310a1585f0dd81bde1237842f550456e089e68b8c85c2d30c53b73a3881079d4d28faaf566643e03aca3558d30a5961aebe9ad68"}, @generic={0xac, 0x10, 0x0, "5c4d67b273313fd8cfc24154921cefe582f3c506fa4c818904ac5733f74e5e373df237ec82cbd4284502bf808dfd060106f3b02a99bde4ab532555ea4aed32ea8ab10fb3f2f7ab9da815d6bbc0b8e929606c451d808fd0e9e6ec3f0dd9d18213980b81f1f89143d2947ebe114f4761d64cea0936b7948f92972945d559d62ee91f0122031a8185b9936624f81ac676845a14946a9c714154c264e42b2837f2bf0d9d2d7b5fac93fdc7"}]}, 0x7, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x81a}}, {0x27, &(0x7f0000000c00)=@string={0x27, 0x3, "0a97ccc36cf52502fdccbafc121d98ed1bd26938f3cd8230aa0673364448f4f2033065eb64"}}, {0xd4, &(0x7f0000000c40)=@string={0xd4, 0x3, "f68ec636d0547c9aed159e6f70532fff2b9c126b68d2685416bd0574f5b46b7d114895766edf23de14babfde1911fac84aca2d275e030827a2956797730c2cee7a5eaccf59c3f07d50ba43d1b05984a6964584277e1733781fb4dc110f80952f4b2fabae622480abb4f1c61c2db24057e991c0791993811ac7f0a816481b02f0353ad5eb041ca56f6ffcd593ff926edc5ede627ddcf5cb2f99cd66ee8448ebd80dd26a319e11f64245701488b128fab818cd1e4211712d077e60c5793d249af6accb0c68d0df5b08e48f69916e83c2dab931"}}, {0x78, &(0x7f0000000d40)=@string={0x78, 0x3, "1ac0b93c245b8e07ad512b8c6b158642b0309c3b36cfa6ed006d97e78279bdacbf6434a792cdede71902e9fd72ec046be8b5f382e38be1987810fd4210acc37ac13fafdffce893c434b0614777874e7303114be7f14c8651c61b45e7c1568095750df746c5d4640aee7b862beea66a53544d95ab33cf"}}, {0x1b, &(0x7f0000000dc0)=@string={0x1b, 0x3, "1f3f9a2073e2d36a522249edc717bdc2aa43e9dab5afbdca92"}}, {0xd4, &(0x7f0000000e00)=@string={0xd4, 0x3, "6d4a176d70f713284c7bd3986d1b1fff7f166d5f46de272c8dc5c1f297b3ea6bda38f2d5b72e9bf1ff6927f974a82cc6f6e1cc139bd199695ec19f58dfcf256e1145f2da14c61a5b38cfdbed99966973fc152da3a27f2ef60369d8a526769b35fedd841f0d385286506e2bf1cb7ba89f475545ee513d59c11fb65d924ebbe36dde4e0e287776744c3dd740c234647ba500c42e57b6e9a47dd72d441ec70eb7c507ad8f8744120657a0dc290ab5e7c8b60ad06bd00bdf3d282227553d773a2c566bc1bacb6eb14059fd7e9ade0f54e672884f"}}, {0xf4, &(0x7f0000000f00)=@string={0xf4, 0x3, "deee6eb14777303a925695b5f5efbc70369a5c5784b28010bd50c44f5fe9e6766a75f07dc080f091ba41f616e95fbdaf51ac1d03d388977f933fe5ea5b5f02e665f24c2b8f8e584c3530fa4760388c6d3d2b35b468575a2e26f797c9b2508187885ee17cb9e13c4658854b9d781297c350b19dd6e15334f0dea60441902185c2293fdbe384ccb3b5c31cb353ffbe631c99c1781e31c94e3dbeb738ee13bff5f83d6f2bc0de27c75e7a3b0d24b32350ce194f8c4f4f2bf93c3f2b59b65ce092a81586437f1db0d7bd16a49fb9dcfc76f9fa16aadfaca5e3414bdc60fd5a5b94ade2e6b2a8c1b87347554c79e4899ca7db0662"}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) bind$nfc_llcp(r8, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) accept4$nfc_llcp(r8, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000001080)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 7.650500309s ago: executing program 2 (id=40): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 7.376324234s ago: executing program 2 (id=41): sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 7.114289605s ago: executing program 2 (id=42): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private0}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x40}}, 0x0) 6.956353094s ago: executing program 3 (id=43): syz_open_dev$media(&(0x7f0000000100), 0x8000, 0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 6.759047713s ago: executing program 3 (id=44): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x3f, {0x3f, 0x10, "34fe801d5e42efabdb313164e6d1c87e3dc81c1821ba63851417b1888519ce5479f7dce063506cbe7bfdd5d7229c570d35288fef9833aafb4af6868f62"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.637336236s ago: executing program 3 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000af7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendto$inet(r6, &(0x7f0000000040)="ff1fcd8530a3060e91a67af3bf7bfac53190871583b9f6ebf9bf50f2467af86ec5282c90f97e246c3df3537e38", 0x2d, 0x4, 0x0, 0x0) 0s ago: executing program 3 (id=47): r0 = socket(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4e8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000280)) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002a000900e4ff1000000000000400002c410011803cca935e56c61a30c6b6607f08fa86edc2bae6327cd7c70b7da0ceb943027c2b0269152f038733a772553d464c52f2ad8d3826362062ce174f160f6fb82027a05244a8b0371d122b60a501d4ccb2611ac163f027abea11946697a55e3020b3e0e770935c448e2661574e"], 0x58}}, 0x8040010) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) flock(0xffffffffffffffff, 0x1) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x204, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) creat(&(0x7f0000000080)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 57.944832][ T29] audit: type=1400 audit(1727964628.890:88): avc: denied { mounton } for pid=5207 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.949805][ T5207] cgroup: Unknown subsys name 'net' [ 57.967652][ T29] audit: type=1400 audit(1727964628.890:89): avc: denied { mount } for pid=5207 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.995459][ T29] audit: type=1400 audit(1727964628.920:90): avc: denied { unmount } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.177059][ T5207] cgroup: Unknown subsys name 'cpuset' [ 58.185650][ T5207] cgroup: Unknown subsys name 'rlimit' [ 58.314435][ T29] audit: type=1400 audit(1727964629.250:91): avc: denied { setattr } for pid=5207 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.348138][ T29] audit: type=1400 audit(1727964629.260:92): avc: denied { create } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.378857][ T29] audit: type=1400 audit(1727964629.260:93): avc: denied { write } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.399751][ T29] audit: type=1400 audit(1727964629.260:94): avc: denied { read } for pid=5207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.419512][ T5209] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.420535][ T29] audit: type=1400 audit(1727964629.270:95): avc: denied { mounton } for pid=5207 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.453781][ T29] audit: type=1400 audit(1727964629.270:96): avc: denied { mount } for pid=5207 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.477077][ T29] audit: type=1400 audit(1727964629.310:97): avc: denied { read } for pid=4889 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.596774][ T5207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.736959][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.745709][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.758538][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.766794][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.775266][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.784371][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.793548][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.801855][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.809885][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.818467][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.827161][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.834804][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.844901][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.856632][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.861202][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.865278][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.872975][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.878997][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.886702][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.894348][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.906461][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.907267][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.914297][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.921543][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.935208][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.936718][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.950989][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.951946][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.966018][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.968045][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.380746][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 62.445853][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 62.539956][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 62.561044][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 62.662962][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.671695][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.679999][ T5217] bridge_slave_0: entered allmulticast mode [ 62.687186][ T5217] bridge_slave_0: entered promiscuous mode [ 62.696865][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.704159][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.711337][ T5217] bridge_slave_1: entered allmulticast mode [ 62.718408][ T5217] bridge_slave_1: entered promiscuous mode [ 62.739943][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.747685][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.755129][ T5218] bridge_slave_0: entered allmulticast mode [ 62.761732][ T5218] bridge_slave_0: entered promiscuous mode [ 62.769091][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.776263][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.783830][ T5218] bridge_slave_1: entered allmulticast mode [ 62.791291][ T5218] bridge_slave_1: entered promiscuous mode [ 62.816418][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 62.842072][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.855920][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.941174][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.954893][ T5217] team0: Port device team_slave_0 added [ 62.967385][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.978112][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.985538][ T5233] bridge_slave_0: entered allmulticast mode [ 62.992275][ T5233] bridge_slave_0: entered promiscuous mode [ 63.000695][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.008683][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.016061][ T5233] bridge_slave_1: entered allmulticast mode [ 63.022883][ T5233] bridge_slave_1: entered promiscuous mode [ 63.040295][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.059485][ T5217] team0: Port device team_slave_1 added [ 63.100553][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.110941][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.118271][ T5221] bridge_slave_0: entered allmulticast mode [ 63.125768][ T5221] bridge_slave_0: entered promiscuous mode [ 63.170804][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.180092][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.188048][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.195697][ T5221] bridge_slave_1: entered allmulticast mode [ 63.202340][ T5221] bridge_slave_1: entered promiscuous mode [ 63.211806][ T5218] team0: Port device team_slave_0 added [ 63.218813][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.226256][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.252877][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.274820][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.302044][ T5218] team0: Port device team_slave_1 added [ 63.308858][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.320092][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.346507][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.366366][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.373840][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.381174][ T5230] bridge_slave_0: entered allmulticast mode [ 63.388484][ T5230] bridge_slave_0: entered promiscuous mode [ 63.405904][ T5233] team0: Port device team_slave_0 added [ 63.413988][ T5233] team0: Port device team_slave_1 added [ 63.446391][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.453816][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.461005][ T5230] bridge_slave_1: entered allmulticast mode [ 63.468544][ T5230] bridge_slave_1: entered promiscuous mode [ 63.484399][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.502502][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.510072][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.536663][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.578762][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.598176][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.605486][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.632107][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.645977][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.657712][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.667618][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.674962][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.701072][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.754677][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.761735][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.788303][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.801936][ T5221] team0: Port device team_slave_0 added [ 63.812119][ T5217] hsr_slave_0: entered promiscuous mode [ 63.819173][ T5217] hsr_slave_1: entered promiscuous mode [ 63.845034][ T5230] team0: Port device team_slave_0 added [ 63.852153][ T5221] team0: Port device team_slave_1 added [ 63.884358][ T5218] hsr_slave_0: entered promiscuous mode [ 63.890684][ T5218] hsr_slave_1: entered promiscuous mode [ 63.897150][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.906134][ T5218] Cannot create hsr debugfs directory [ 63.914176][ T5230] team0: Port device team_slave_1 added [ 63.954322][ T5224] Bluetooth: hci1: command tx timeout [ 63.979653][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.989337][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.019145][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.033570][ T5236] Bluetooth: hci2: command tx timeout [ 64.039328][ T5236] Bluetooth: hci3: command tx timeout [ 64.043526][ T5224] Bluetooth: hci4: command tx timeout [ 64.044928][ T5232] Bluetooth: hci0: command tx timeout [ 64.071254][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.078282][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.104930][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.118414][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.125770][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.152014][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.175050][ T5233] hsr_slave_0: entered promiscuous mode [ 64.181690][ T5233] hsr_slave_1: entered promiscuous mode [ 64.189064][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.196861][ T5233] Cannot create hsr debugfs directory [ 64.206897][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.214094][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.240459][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.384273][ T5230] hsr_slave_0: entered promiscuous mode [ 64.390879][ T5230] hsr_slave_1: entered promiscuous mode [ 64.397245][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.405300][ T5230] Cannot create hsr debugfs directory [ 64.439302][ T5221] hsr_slave_0: entered promiscuous mode [ 64.446116][ T5221] hsr_slave_1: entered promiscuous mode [ 64.452273][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.460155][ T5221] Cannot create hsr debugfs directory [ 64.672742][ T5218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.699103][ T5218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.735118][ T5218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.746127][ T5218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.815699][ T5217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.827997][ T5217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.857451][ T5217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.883261][ T5217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.919935][ T5233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.930902][ T5233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.942250][ T5233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.952597][ T5233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.060522][ T5221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.085452][ T5221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.095525][ T5221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.111369][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.131655][ T5221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.175444][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.210343][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.217895][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.248863][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.256117][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.277574][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.293260][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.303255][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.317686][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.356677][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.401669][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.425975][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.433244][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.464941][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.472429][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.493060][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.513982][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.547102][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 65.547122][ T29] audit: type=1400 audit(1727964636.490:111): avc: denied { sys_module } for pid=5218 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.589147][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.596590][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.652111][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.659367][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.760863][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.775277][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.816416][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.855048][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.896206][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.903501][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.917854][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.938950][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.946142][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.009632][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.016853][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.034858][ T5236] Bluetooth: hci1: command tx timeout [ 66.068630][ T5218] veth0_vlan: entered promiscuous mode [ 66.081778][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.089391][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.113803][ T5236] Bluetooth: hci3: command tx timeout [ 66.119339][ T5222] Bluetooth: hci4: command tx timeout [ 66.119351][ T5224] Bluetooth: hci2: command tx timeout [ 66.125266][ T5232] Bluetooth: hci0: command tx timeout [ 66.227738][ T5218] veth1_vlan: entered promiscuous mode [ 66.246803][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.266718][ T5221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.303032][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.360848][ T5218] veth0_macvtap: entered promiscuous mode [ 66.415310][ T5218] veth1_macvtap: entered promiscuous mode [ 66.464719][ T5217] veth0_vlan: entered promiscuous mode [ 66.500993][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.518202][ T5217] veth1_vlan: entered promiscuous mode [ 66.540230][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.585992][ T5218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.597662][ T5218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607483][ T5218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.616826][ T5218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.649541][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.765988][ T5217] veth0_macvtap: entered promiscuous mode [ 66.798403][ T5233] veth0_vlan: entered promiscuous mode [ 66.822461][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.839109][ T5233] veth1_vlan: entered promiscuous mode [ 66.861172][ T5230] veth0_vlan: entered promiscuous mode [ 66.868459][ T5217] veth1_macvtap: entered promiscuous mode [ 66.908580][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.920039][ T5230] veth1_vlan: entered promiscuous mode [ 66.932447][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.999728][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.999778][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.013396][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.025028][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.040627][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.071888][ T5233] veth0_macvtap: entered promiscuous mode [ 67.079126][ T29] audit: type=1400 audit(1727964638.010:112): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.lEQuzG/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.116836][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.126114][ T29] audit: type=1400 audit(1727964638.050:113): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.128048][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.156398][ T29] audit: type=1400 audit(1727964638.050:114): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.lEQuzG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.165792][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.200505][ T29] audit: type=1400 audit(1727964638.050:115): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.206351][ T5217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.237934][ T5217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.238811][ T29] audit: type=1400 audit(1727964638.050:116): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.lEQuzG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.247069][ T5217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.280349][ T29] audit: type=1400 audit(1727964638.050:117): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.lEQuzG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.285109][ T5217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.311213][ T29] audit: type=1400 audit(1727964638.060:118): avc: denied { unmount } for pid=5218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.345617][ T29] audit: type=1400 audit(1727964638.140:119): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.378841][ T5218] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.383046][ T5230] veth0_macvtap: entered promiscuous mode [ 67.409075][ T29] audit: type=1400 audit(1727964638.140:120): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.416590][ T5233] veth1_macvtap: entered promiscuous mode [ 67.441150][ T5221] veth0_vlan: entered promiscuous mode [ 67.472071][ T5230] veth1_macvtap: entered promiscuous mode [ 67.517222][ T5221] veth1_vlan: entered promiscuous mode [ 67.547865][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.559498][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.571447][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.582460][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.594702][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.625461][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.649104][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.660726][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.672462][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.682839][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.694079][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.714758][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.733769][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.747562][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.769346][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.782146][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.805351][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.842965][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.855735][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.868148][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.880159][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.891565][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.902561][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.915196][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.932843][ T5233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943645][ T5233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.952861][ T5233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.962838][ T5233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.991469][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.004081][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.014751][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.026039][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.090645][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.099190][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.117088][ T5232] Bluetooth: hci1: command tx timeout [ 68.137828][ T5221] veth0_macvtap: entered promiscuous mode [ 68.165684][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.178970][ T5221] veth1_macvtap: entered promiscuous mode [ 68.189776][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.199093][ T5232] Bluetooth: hci0: command tx timeout [ 68.199335][ T5236] Bluetooth: hci4: command tx timeout [ 68.205443][ T5232] Bluetooth: hci3: command tx timeout [ 68.210931][ T5224] Bluetooth: hci2: command tx timeout [ 68.247729][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.260273][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.272640][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.284903][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.295630][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.309491][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.319483][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.324014][ T5220] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.330229][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.351082][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.401434][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.424139][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.447289][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.458713][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.468975][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.479950][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.490442][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.501903][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.514632][ T5220] usb 4-1: Using ep0 maxpacket: 8 [ 68.517258][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.532124][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.537231][ T5221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.554602][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.558531][ T5221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.573267][ T5221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.573387][ T5220] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.582925][ T5221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.602068][ T5220] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 68.616836][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.665751][ T5220] usb 4-1: config 0 descriptor?? [ 68.732744][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.764358][ T5321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.782480][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.790868][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.809678][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.908556][ T1909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.937780][ T1909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.983585][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.991460][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.039752][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.073920][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.145025][ T5220] aquacomputer_d5next 0003:0C70:F001.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.3-1/input0 [ 69.230807][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.272008][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.335382][ T5327] ======================================================= [ 69.335382][ T5327] WARNING: The mand mount option has been deprecated and [ 69.335382][ T5327] and is ignored by this kernel. Remove the mand [ 69.335382][ T5327] option from the mount to silence this warning. [ 69.335382][ T5327] ======================================================= [ 69.353307][ T5220] usb 4-1: USB disconnect, device number 2 [ 70.015992][ T5346] raw_sendmsg: syz.0.18 forgot to set AF_INET. Fix it! [ 70.195911][ T5224] Bluetooth: hci1: command tx timeout [ 70.276752][ T5316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.286870][ T5224] Bluetooth: hci3: command tx timeout [ 70.292909][ T5224] Bluetooth: hci0: command tx timeout [ 70.299734][ T5224] Bluetooth: hci2: command tx timeout [ 70.305734][ T5236] Bluetooth: hci4: command tx timeout [ 70.464390][ T5316] usb 5-1: Using ep0 maxpacket: 16 [ 70.571786][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.594144][ T5315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.631282][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.682688][ T5316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.700273][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 70.700292][ T29] audit: type=1400 audit(1727964641.640:161): avc: denied { mounton } for pid=5363 comm="syz.1.27" path="/3/file0" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.748243][ T5365] 9p: Unknown Cache mode or invalid value mmapA [ 70.804838][ T5315] usb 4-1: Using ep0 maxpacket: 8 [ 70.816717][ T5315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 70.836093][ T5316] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 70.873595][ T5315] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 70.904278][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.950897][ T5315] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 70.999715][ T5316] usb 5-1: config 0 descriptor?? [ 71.013468][ T5315] usb 4-1: Product: syz [ 71.042448][ T5315] usb 4-1: Manufacturer: syz [ 71.091161][ T5315] usb 4-1: SerialNumber: syz [ 71.311999][ T29] audit: type=1400 audit(1727964641.740:162): avc: denied { map_read } for pid=5366 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.414358][ T5315] usb 4-1: Handspring Visor / Palm OS: port 170, is for unknown use [ 71.443161][ T5315] usb 4-1: Handspring Visor / Palm OS: Number of ports: 1 [ 71.518175][ T5316] shield 0003:0955:7214.0002: item fetching failed at offset 4/5 [ 71.566016][ T29] audit: type=1400 audit(1727964642.500:163): avc: denied { read } for pid=5371 comm="syz.0.30" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.617030][ T5316] shield 0003:0955:7214.0002: Parse failed [ 71.630322][ T5315] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 71.660555][ T5316] shield 0003:0955:7214.0002: probe with driver shield failed with error -22 [ 71.673060][ T5315] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 71.690714][ T5374] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 71.731250][ T5316] usb 5-1: USB disconnect, device number 2 [ 71.744317][ T5315] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 71.803228][ T5315] usb 4-1: USB disconnect, device number 3 [ 71.861969][ T5315] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 71.872094][ T29] audit: type=1400 audit(1727964642.500:164): avc: denied { open } for pid=5371 comm="syz.0.30" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.916250][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.923164][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.955820][ T5374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.30'. [ 71.975150][ T5315] visor 4-1:1.0: device disconnected [ 72.195389][ T5270] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.813616][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 73.073408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.103501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.163529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.183406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.234590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 73.293519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.302299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 73.313646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 73.579299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 73.695887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 73.906272][ T5270] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 73.973546][ T5270] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.083281][ T5270] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.113179][ T29] audit: type=1400 audit(1727964645.050:165): avc: denied { create } for pid=5384 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.143571][ T5316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.171782][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.282161][ T5270] usbtmc 1-1:16.0: bulk endpoints not found [ 74.289788][ T29] audit: type=1400 audit(1727964645.100:166): avc: denied { setopt } for pid=5384 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.353827][ T5316] usb 3-1: Using ep0 maxpacket: 16 [ 74.431890][ T5316] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 74.486472][ T5316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.562362][ T5316] usb 3-1: Product: syz [ 74.692667][ T5316] usb 3-1: Manufacturer: syz [ 74.727120][ T5316] usb 3-1: SerialNumber: syz [ 74.778070][ T5316] usb 3-1: config 0 descriptor?? [ 74.816946][ T5316] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 74.953584][ T5270] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.137003][ T5270] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.183064][ T5270] usb 4-1: config 0 has no interface number 0 [ 75.199980][ T5270] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.220592][ T5270] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.248418][ T5270] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 75.270494][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.290625][ T5316] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 75.372396][ T5270] usb 4-1: config 0 descriptor?? [ 75.456589][ T5316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.595149][ T5315] usb 3-1: USB disconnect, device number 2 [ 75.651027][ T5316] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 75.679105][ T5315] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 75.701538][ T5316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.727174][ T5315] visor 3-1:0.0: device disconnected [ 75.733111][ T5316] usb 5-1: config 0 has no interface number 0 [ 75.784062][ T5316] usb 5-1: config 0 interface 108 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.858558][ T5316] usb 5-1: config 0 interface 108 has no altsetting 0 [ 75.914752][ T5270] asus 0003:048D:CE50.0003: unknown main item tag 0xd [ 75.922254][ T5316] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 75.962886][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.972523][ T5270] asus 0003:048D:CE50.0003: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input1 [ 76.014312][ T5316] usb 5-1: config 0 descriptor?? [ 76.040422][ T5270] asus 0003:048D:CE50.0003: Asus input not registered [ 76.061837][ T5316] usbhid 5-1:0.108: couldn't find an input interrupt endpoint [ 76.092399][ T5270] asus 0003:048D:CE50.0003: probe with driver asus failed with error -12 [ 76.179480][ T5270] usb 4-1: USB disconnect, device number 4 [ 76.436174][ T29] audit: type=1400 audit(1727964647.380:167): avc: denied { getopt } for pid=5397 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.659305][ T29] audit: type=1400 audit(1727964647.600:168): avc: denied { read } for pid=5400 comm="syz.2.41" name="sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.740787][ T29] audit: type=1400 audit(1727964647.600:169): avc: denied { open } for pid=5400 comm="syz.2.41" path="/dev/sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.855092][ T5270] usb 1-1: USB disconnect, device number 2 [ 76.889467][ T29] audit: type=1400 audit(1727964647.630:170): avc: denied { ioctl } for pid=5400 comm="syz.2.41" path="/dev/sg0" dev="devtmpfs" ino=694 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.969288][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.020352][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.060269][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.124962][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.618548][ T29] audit: type=1400 audit(1727964648.560:171): avc: denied { create } for pid=5395 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.684972][ T29] audit: type=1400 audit(1727964648.620:172): avc: denied { bind } for pid=5395 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.716851][ T5220] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.779876][ T29] audit: type=1400 audit(1727964648.620:173): avc: denied { accept } for pid=5395 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.895646][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.915420][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.929776][ T5220] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 77.948669][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.989407][ T5220] usb 4-1: config 0 descriptor?? [ 78.467928][ T5220] magicmouse 0003:05AC:0269.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 78.667723][ T5220] usb 4-1: USB disconnect, device number 5 [ 79.861099][ T29] audit: type=1400 audit(1727964650.710:174): avc: denied { create } for pid=5415 comm="syz.3.45" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.721910][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.733435][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.742271][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.751640][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.761414][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.768924][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.798909][ T29] audit: type=1400 audit(1727964652.740:175): avc: denied { mounton } for pid=5420 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.052530][ T1166] cfg80211: failed to load regulatory.db [ 83.793649][ T5232] Bluetooth: hci5: command tx timeout [ 83.988686][ T29] audit: type=1400 audit(1727964654.930:176): avc: denied { create } for pid=5422 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.896400][ T29] audit: type=1400 audit(1727964655.840:177): avc: denied { write } for pid=5422 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.993509][ T29] audit: type=1400 audit(1727964655.930:178): avc: denied { mounton } for pid=5422 comm="syz.3.47" path="/12/file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.938027][ T5232] Bluetooth: hci5: command tx timeout [ 88.436089][ T5232] Bluetooth: hci5: command tx timeout [ 89.626321][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.636530][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.646089][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.662228][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.674240][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.682905][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.304179][ T5224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.313102][ T5224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.324552][ T5224] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.341625][ T5224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.349773][ T5224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.363849][ T5224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.501410][ T5224] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 90.513887][ T5224] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 90.522046][ T5236] Bluetooth: hci5: command tx timeout [ 90.532354][ T5224] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 90.540908][ T5224] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 90.550438][ T5224] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 90.559467][ T5224] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 91.713557][ T5224] Bluetooth: hci6: command tx timeout [ 92.433588][ T5224] Bluetooth: hci7: command tx timeout [ 92.593608][ T5224] Bluetooth: hci8: command tx timeout [ 93.793521][ T5224] Bluetooth: hci6: command tx timeout [ 94.524117][ T5224] Bluetooth: hci7: command tx timeout [ 94.673557][ T5224] Bluetooth: hci8: command tx timeout [ 94.746405][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 94.757293][ T5232] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 94.767212][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 94.775580][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 94.783783][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 94.793955][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 95.873726][ T5224] Bluetooth: hci6: command tx timeout [ 96.593497][ T5224] Bluetooth: hci7: command tx timeout [ 96.755217][ T5232] Bluetooth: hci8: command tx timeout [ 96.834909][ T5224] Bluetooth: hci9: command tx timeout [ 97.963473][ T5224] Bluetooth: hci6: command tx timeout [ 98.676809][ T5224] Bluetooth: hci7: command tx timeout [ 98.833617][ T5224] Bluetooth: hci8: command tx timeout [ 98.913547][ T5224] Bluetooth: hci9: command tx timeout [ 100.993660][ T5224] Bluetooth: hci9: command tx timeout [ 103.073538][ T5224] Bluetooth: hci9: command tx timeout [ 107.363364][ C0] sched: DL replenish lagged too much [ 133.238911][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.446573][ T5232] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 144.461738][ T5232] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 144.470932][ T5232] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 144.485967][ T5232] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 144.498956][ T5232] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 144.506539][ T5232] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 145.730941][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.747160][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.755344][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.769006][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.780821][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.789410][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.753619][ T5232] Bluetooth: hci10: command tx timeout [ 147.184123][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.193028][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.201768][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.211639][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.219755][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.231372][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.882085][ T5224] Bluetooth: hci3: command tx timeout [ 148.833579][ T5224] Bluetooth: hci10: command tx timeout [ 149.313545][ T5224] Bluetooth: hci4: command tx timeout [ 149.737926][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.753506][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.762346][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.774468][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.782207][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.791324][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.953550][ T5224] Bluetooth: hci3: command tx timeout [ 150.913624][ T5224] Bluetooth: hci10: command tx timeout [ 151.476119][ T5224] Bluetooth: hci4: command tx timeout [ 151.875903][ T5224] Bluetooth: hci5: command tx timeout [ 152.033625][ T5224] Bluetooth: hci3: command tx timeout [ 152.993593][ T5224] Bluetooth: hci10: command tx timeout [ 153.553616][ T5224] Bluetooth: hci4: command tx timeout [ 153.953627][ T5224] Bluetooth: hci5: command tx timeout [ 154.113662][ T5224] Bluetooth: hci3: command tx timeout [ 155.305959][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.317396][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.326014][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.334172][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.348100][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.356527][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.633709][ T5232] Bluetooth: hci4: command tx timeout [ 156.033638][ T5232] Bluetooth: hci5: command tx timeout [ 157.393751][ T5232] Bluetooth: hci6: command tx timeout [ 158.113541][ T5232] Bluetooth: hci5: command tx timeout [ 159.473709][ T5232] Bluetooth: hci6: command tx timeout [ 161.553804][ T5232] Bluetooth: hci6: command tx timeout [ 163.633793][ T5232] Bluetooth: hci6: command tx timeout [ 186.532752][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 186.538871][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 186.545119][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 194.682021][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.225402][ T5236] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 204.234620][ T5236] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 204.242773][ T5236] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 204.251211][ T5236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 204.259216][ T5236] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 204.274468][ T5236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 205.607734][ T5224] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 205.620608][ T5224] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 205.630362][ T5224] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 205.638899][ T5224] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 205.653827][ T5224] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 205.662567][ T5224] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 206.353665][ T5224] Bluetooth: hci11: command tx timeout [ 207.703671][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 207.718502][ T5236] Bluetooth: hci12: command tx timeout [ 207.729776][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 207.738114][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 207.747710][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 207.756319][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 207.764482][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 208.433551][ T5236] Bluetooth: hci11: command tx timeout [ 209.803744][ T5236] Bluetooth: hci13: command tx timeout [ 209.809817][ T5236] Bluetooth: hci12: command tx timeout [ 209.882510][ T5224] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 209.893746][ T5224] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 209.904711][ T5224] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 209.915044][ T5224] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 209.922925][ T5224] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 209.930925][ T5224] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 210.514114][ T5224] Bluetooth: hci11: command tx timeout [ 211.873551][ T5236] Bluetooth: hci13: command tx timeout [ 211.881494][ T5224] Bluetooth: hci12: command tx timeout [ 211.953577][ T5236] Bluetooth: hci14: command tx timeout [ 212.593543][ T5224] Bluetooth: hci11: command tx timeout [ 213.953590][ T5224] Bluetooth: hci12: command tx timeout [ 213.959151][ T5224] Bluetooth: hci13: command tx timeout [ 214.033451][ T5224] Bluetooth: hci14: command tx timeout [ 216.039240][ T5224] Bluetooth: hci13: command tx timeout [ 216.123546][ T5224] Bluetooth: hci14: command tx timeout [ 216.385596][ T5232] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 216.403668][ T5232] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 216.411877][ T5232] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 216.424120][ T5232] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 216.434633][ T5232] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 216.442110][ T5232] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 217.249814][ T5232] Bluetooth: hci7: command 0x0406 tx timeout [ 217.255961][ T4613] Bluetooth: hci8: command 0x0406 tx timeout [ 217.262333][ T5224] Bluetooth: hci9: command 0x0406 tx timeout [ 218.194096][ T5236] Bluetooth: hci14: command tx timeout [ 218.513543][ T5236] Bluetooth: hci15: command tx timeout [ 220.593594][ T5236] Bluetooth: hci15: command tx timeout [ 221.555107][ T30] INFO: task syz.1.36:5389 blocked for more than 143 seconds. [ 221.563013][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 221.583388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.592128][ T30] task:syz.1.36 state:D stack:28560 pid:5389 tgid:5388 ppid:5221 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.663479][ T30] Call Trace: [ 221.666918][ T30] [ 221.669880][ T30] __schedule+0xef5/0x5750 [ 221.763586][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 221.768881][ T30] ? __pfx___schedule+0x10/0x10 [ 221.829362][ T30] ? schedule+0x298/0x350 [ 221.853815][ T30] ? __pfx_lock_release+0x10/0x10 [ 221.858921][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 221.871019][ T30] ? lock_acquire+0x2f/0xb0 [ 221.876254][ T30] ? schedule+0x1fd/0x350 [ 221.881755][ T30] schedule+0xe7/0x350 [ 221.893570][ T30] schedule_preempt_disabled+0x13/0x30 [ 221.899091][ T30] __mutex_lock+0x5b8/0x9c0 [ 221.910588][ T30] ? genl_rcv_msg+0x580/0x800 [ 221.915623][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 221.920697][ T30] ? __dev_queue_xmit+0x872/0x4400 [ 221.932405][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.940147][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 221.951085][ T30] ? genl_rcv_msg+0x580/0x800 [ 221.958313][ T30] genl_rcv_msg+0x580/0x800 [ 221.962883][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.973117][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 221.979946][ T30] netlink_rcv_skb+0x16b/0x440 [ 221.991215][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.999722][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.011182][ T30] ? down_read+0xc9/0x330 [ 222.017080][ T30] ? __pfx_down_read+0x10/0x10 [ 222.021905][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 222.032421][ T30] genl_rcv+0x28/0x40 [ 222.043331][ T30] netlink_unicast+0x53c/0x7f0 [ 222.048173][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 222.063362][ T30] netlink_sendmsg+0x8b8/0xd70 [ 222.068290][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.078984][ T30] __sys_sendto+0x479/0x4d0 [ 222.083910][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 222.089993][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 222.101815][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 222.110074][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 222.122134][ T30] ? do_syscall_64+0x91/0x250 [ 222.127371][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.132622][ T30] do_syscall_64+0xcd/0x250 [ 222.143336][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.149298][ T30] RIP: 0033:0x7f57ac17fe8c [ 222.160590][ T30] RSP: 002b:00007f57acf69ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 222.169520][ T30] RAX: ffffffffffffffda RBX: 00007f57acf69fc0 RCX: 00007f57ac17fe8c [ 222.183603][ T30] RDX: 0000000000000020 RSI: 00007f57acf6a010 RDI: 0000000000000003 [ 222.193084][ T30] RBP: 0000000000000000 R08: 00007f57acf69f14 R09: 000000000000000c [ 222.208706][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 222.221178][ T30] R13: 00007f57acf69f68 R14: 00007f57acf6a010 R15: 0000000000000000 [ 222.233492][ T30] [ 222.236650][ T30] [ 222.236650][ T30] Showing all locks held in the system: [ 222.252618][ T30] 3 locks held by kworker/0:0/8: [ 222.259921][ T30] 1 lock held by khungtaskd/30: [ 222.267053][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 222.286297][ T30] 3 locks held by kworker/u8:4/67: [ 222.292452][ T30] #0: ffff88814bffa148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 222.310173][ T30] #1: ffffc900015d7d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 222.332247][ T30] #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 222.342372][ T30] 3 locks held by kworker/0:2/937: [ 222.353614][ T30] 3 locks held by kworker/1:2/1166: [ 222.358851][ T30] #0: ffff88801b081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 222.377568][ T30] #1: ffffc90004f97d80 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 222.390686][ T30] #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 222.405116][ T30] 5 locks held by kworker/u8:6/1909: [ 222.410454][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 222.427554][ T30] #1: ffffc900056ffd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 222.440927][ T30] #2: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 222.454305][ T30] #3: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xb40 [ 222.468364][ T30] #4: ffffffff8e05b950 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x54d/0x1e50 [ 222.482641][ T30] 2 locks held by getty/4979: [ 222.492711][ T30] #0: ffff88802ecef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 222.505128][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 222.521316][ T30] 3 locks held by kworker/0:3/5271: [ 222.529773][ T30] 3 locks held by kworker/0:4/5272: [ 222.540146][ T30] 7 locks held by kworker/0:7/5302: [ 222.547364][ T30] 3 locks held by kworker/0:8/5303: [ 222.552696][ T30] 4 locks held by syz.0.30/5374: [ 222.562939][ T30] #0: ffffffff8ff7f2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 222.572829][ T30] #1: ffffffff8ff7f368 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x580/0x800 [ 222.589243][ T30] #2: ffffffff8f430f88 (hwsim_phys_lock){+.+.}-{3:3}, at: hwsim_del_radio_nl+0xa8/0x200 [ 222.601950][ T30] #3: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: wpan_phy_unregister+0xb1/0x3d0 [ 222.616657][ T30] 2 locks held by syz.1.36/5389: [ 222.622523][ T30] #0: ffffffff8ff7f2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 222.635809][ T30] #1: ffffffff8ff7f368 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x580/0x800 [ 222.650749][ T30] 1 lock held by syz.4.39/5413: [ 222.657945][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 222.672230][ T30] 1 lock held by syz.2.42/5403: [ 222.677343][ T5236] Bluetooth: hci15: command tx timeout [ 222.684558][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 222.700054][ T30] 2 locks held by syz.3.47/5424: [ 222.708993][ T30] #0: ffffffff8ff7f2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 222.720114][ T30] #1: ffffffff8ff7f368 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x580/0x800 [ 222.734116][ T30] 2 locks held by syz-executor/5436: [ 222.739456][ T30] #0: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 222.755016][ T30] #1: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 222.771787][ T30] 2 locks held by syz-executor/5438: [ 222.777505][ T30] #0: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 222.793805][ T30] #1: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 222.812648][ T30] 2 locks held by syz-executor/5441: [ 222.818519][ T30] #0: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 222.835411][ T30] #1: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 222.850873][ T30] 2 locks held by syz-executor/5455: [ 222.858753][ T30] #0: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 222.874086][ T30] #1: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 222.889867][ T30] 1 lock held by syz-executor/5459: [ 222.896681][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 222.915050][ T30] 1 lock held by syz-executor/5462: [ 222.920305][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 222.937342][ T30] 1 lock held by syz-executor/5465: [ 222.942597][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 222.955036][ T30] 1 lock held by syz-executor/5468: [ 222.960275][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 222.977451][ T30] 1 lock held by syz-executor/5476: [ 222.982696][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 222.993935][ T30] 1 lock held by syz-executor/5482: [ 222.999173][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 223.018102][ T30] 1 lock held by syz-executor/5485: [ 223.025924][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 223.040669][ T30] 1 lock held by syz-executor/5488: [ 223.047583][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 223.062532][ T30] 1 lock held by syz-executor/5491: [ 223.071698][ T30] #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 223.093460][ T30] [ 223.095836][ T30] ============================================= [ 223.095836][ T30] [ 223.109733][ T30] NMI backtrace for cpu 1 [ 223.114119][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 223.124649][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.134731][ T30] Call Trace: [ 223.138029][ T30] [ 223.140981][ T30] dump_stack_lvl+0x116/0x1f0 [ 223.145708][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 223.150681][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 223.156707][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 223.162810][ T30] watchdog+0xf0c/0x1240 [ 223.167089][ T30] ? __pfx_watchdog+0x10/0x10 [ 223.171796][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.177031][ T30] ? __kthread_parkme+0x148/0x220 [ 223.182091][ T30] ? __pfx_watchdog+0x10/0x10 [ 223.186807][ T30] kthread+0x2c1/0x3a0 [ 223.190905][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.196137][ T30] ? __pfx_kthread+0x10/0x10 [ 223.200764][ T30] ret_from_fork+0x45/0x80 [ 223.205206][ T30] ? __pfx_kthread+0x10/0x10 [ 223.209830][ T30] ret_from_fork_asm+0x1a/0x30 [ 223.214645][ T30] [ 223.218227][ T30] Sending NMI from CPU 1 to CPUs 0: [ 223.223833][ C0] NMI backtrace for cpu 0 [ 223.223857][ C0] CPU: 0 UID: 0 PID: 5302 Comm: kworker/0:7 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 223.223885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.223901][ C0] Workqueue: events nsim_dev_trap_report_work [ 223.223933][ C0] RIP: 0010:unwind_next_frame+0x830/0x20c0 [ 223.223962][ C0] Code: 00 4c 89 f6 4c 89 ef 4c 89 4c 24 20 48 89 4c 24 18 e8 d4 f5 ff ff 4d 8d 45 34 84 c0 0f 84 2c fb ff ff 4c 89 f7 e8 b0 ed ff ff <4c> 8b 4c 24 20 49 89 c6 48 8b 4c 24 18 48 b8 00 00 00 00 00 fc ff [ 223.223984][ C0] RSP: 0018:ffffc900000070e8 EFLAGS: 00000202 [ 223.224002][ C0] RAX: ffffc9000439fbe8 RBX: 0000000000000002 RCX: ffffc90000008000 [ 223.224018][ C0] RDX: ffffc90000008001 RSI: ffffc90000007ff8 RDI: ffffc90000007ff8 [ 223.224034][ C0] RBP: ffffc900000071a0 R08: ffffc9000000718c R09: ffffffff90f17898 [ 223.224050][ C0] R10: ffffc90000007158 R11: 000000000000507a R12: ffffc900000071a8 [ 223.224065][ C0] R13: ffffc90000007158 R14: ffffc90000007ff8 R15: 0000000000000000 [ 223.224081][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 223.224103][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.224120][ C0] CR2: 000000110c29c4e1 CR3: 000000004b0e6000 CR4: 00000000003526f0 [ 223.224135][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.224149][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.224164][ C0] Call Trace: [ 223.224170][ C0] [ 223.224179][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 223.224205][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 223.224238][ C0] ? nmi_handle+0x1a9/0x5c0 [ 223.224263][ C0] ? unwind_next_frame+0x830/0x20c0 [ 223.224287][ C0] ? default_do_nmi+0x6a/0x160 [ 223.224322][ C0] ? exc_nmi+0x170/0x1e0 [ 223.224341][ C0] ? end_repeat_nmi+0xf/0x53 [ 223.224374][ C0] ? unwind_next_frame+0x830/0x20c0 [ 223.224399][ C0] ? unwind_next_frame+0x830/0x20c0 [ 223.224424][ C0] ? unwind_next_frame+0x830/0x20c0 [ 223.224448][ C0] [ 223.224455][ C0] [ 223.224463][ C0] ? do_softirq+0xb2/0xf0 [ 223.224490][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.224519][ C0] arch_stack_walk+0x95/0x100 [ 223.224548][ C0] ? nsim_dev_trap_report_work+0x870/0xc80 [ 223.224576][ C0] ? do_softirq+0xb2/0xf0 [ 223.224603][ C0] stack_trace_save+0x95/0xd0 [ 223.224629][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 223.224655][ C0] ? __pfx_mark_lock+0x10/0x10 [ 223.224679][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 223.224702][ C0] kasan_save_stack+0x33/0x60 [ 223.224725][ C0] ? kasan_save_stack+0x33/0x60 [ 223.224747][ C0] ? kasan_save_track+0x14/0x30 [ 223.224770][ C0] ? kasan_save_free_info+0x3b/0x60 [ 223.224801][ C0] ? __kasan_slab_free+0x51/0x70 [ 223.224824][ C0] ? kfree+0x14f/0x4b0 [ 223.224853][ C0] ? skb_free_head+0x108/0x1d0 [ 223.224882][ C0] ? skb_release_data+0x560/0x730 [ 223.224914][ C0] ? consume_skb+0xbf/0x100 [ 223.224934][ C0] ? nft_synproxy_do_eval+0xa51/0xd60 [ 223.224961][ C0] ? nft_do_chain+0x2e6/0x18f0 [ 223.224986][ C0] ? nft_do_chain_inet+0x18b/0x350 [ 223.225010][ C0] ? nf_hook_slow+0xbb/0x200 [ 223.225041][ C0] ? nf_hook.constprop.0+0x42e/0x750 [ 223.225073][ C0] ? ip_local_deliver+0x169/0x1f0 [ 223.225104][ C0] ? ip_rcv+0x2c3/0x5d0 [ 223.225134][ C0] ? __netif_receive_skb_one_core+0x199/0x1e0 [ 223.225162][ C0] ? __netif_receive_skb+0x1d/0x160 [ 223.225189][ C0] ? process_backlog+0x443/0x15f0 [ 223.225215][ C0] ? __napi_poll.constprop.0+0xb7/0x550 [ 223.225243][ C0] ? net_rx_action+0xa92/0x1010 [ 223.225270][ C0] ? handle_softirqs+0x213/0x8f0 [ 223.225294][ C0] ? do_softirq+0xb2/0xf0 [ 223.225333][ C0] kasan_save_track+0x14/0x30 [ 223.225356][ C0] kasan_save_free_info+0x3b/0x60 [ 223.225387][ C0] __kasan_slab_free+0x51/0x70 [ 223.225412][ C0] kfree+0x14f/0x4b0 [ 223.225432][ C0] ? mark_held_locks+0x9f/0xe0 [ 223.225453][ C0] ? skb_free_head+0x108/0x1d0 [ 223.225483][ C0] skb_free_head+0x108/0x1d0 [ 223.225512][ C0] skb_release_data+0x560/0x730 [ 223.225545][ C0] ? dst_release+0x1b5/0x1e0 [ 223.225572][ C0] consume_skb+0xbf/0x100 [ 223.225594][ C0] nft_synproxy_do_eval+0xa51/0xd60 [ 223.225622][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 223.225649][ C0] ? mark_lock+0xb5/0xc60 [ 223.225670][ C0] ? mark_lock+0xb5/0xc60 [ 223.225691][ C0] ? mark_lock+0xb5/0xc60 [ 223.225712][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 223.225740][ C0] nft_do_chain+0x2e6/0x18f0 [ 223.225770][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 223.225795][ C0] ? ipt_do_table+0xd4c/0x1aa0 [ 223.225825][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 223.225855][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.225891][ C0] nft_do_chain_inet+0x18b/0x350 [ 223.225915][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 223.225941][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 223.225967][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 223.226000][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 223.226024][ C0] nf_hook_slow+0xbb/0x200 [ 223.226057][ C0] nf_hook.constprop.0+0x42e/0x750 [ 223.226088][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 223.226122][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 223.226154][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 223.226188][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 223.226226][ C0] ip_local_deliver+0x169/0x1f0 [ 223.226257][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 223.226290][ C0] ip_rcv+0x2c3/0x5d0 [ 223.226322][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 223.226352][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 223.226381][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 223.226411][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 223.226440][ C0] ? process_backlog+0x3f1/0x15f0 [ 223.226469][ C0] ? process_backlog+0x3f1/0x15f0 [ 223.226496][ C0] __netif_receive_skb+0x1d/0x160 [ 223.226524][ C0] process_backlog+0x443/0x15f0 [ 223.226555][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 223.226586][ C0] net_rx_action+0xa92/0x1010 [ 223.226615][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 223.226643][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 223.226671][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 223.226695][ C0] ? run_timer_base+0x119/0x190 [ 223.226731][ C0] ? run_timer_base+0x11e/0x190 [ 223.226760][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 223.226792][ C0] handle_softirqs+0x213/0x8f0 [ 223.226821][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 223.226850][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 223.226876][ C0] ? nsim_dev_trap_report_work+0x870/0xc80 [ 223.226906][ C0] do_softirq+0xb2/0xf0 [ 223.226930][ C0] [ 223.226937][ C0] [ 223.226944][ C0] __local_bh_enable_ip+0x100/0x120 [ 223.226970][ C0] nsim_dev_trap_report_work+0x870/0xc80 [ 223.227006][ C0] process_one_work+0x9c5/0x1ba0 [ 223.227034][ C0] ? __pfx_vmstat_update+0x10/0x10 [ 223.227064][ C0] ? __pfx_process_one_work+0x10/0x10 [ 223.227091][ C0] ? assign_work+0x1a0/0x250 [ 223.227125][ C0] worker_thread+0x6c8/0xf00 [ 223.227151][ C0] ? __kthread_parkme+0x148/0x220 [ 223.227180][ C0] ? __pfx_worker_thread+0x10/0x10 [ 223.227202][ C0] kthread+0x2c1/0x3a0 [ 223.227228][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.227252][ C0] ? __pfx_kthread+0x10/0x10 [ 223.227279][ C0] ret_from_fork+0x45/0x80 [ 223.227301][ C0] ? __pfx_kthread+0x10/0x10 [ 223.227327][ C0] ret_from_fork_asm+0x1a/0x30 [ 223.227366][ C0] [ 223.999375][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 224.006276][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 224.016812][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.026894][ T30] Call Trace: [ 224.030192][ T30] [ 224.033144][ T30] dump_stack_lvl+0x3d/0x1f0 [ 224.037776][ T30] panic+0x71d/0x800 [ 224.041714][ T30] ? __pfx_panic+0x10/0x10 [ 224.046170][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 224.051576][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 224.057593][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 224.062998][ T30] ? watchdog+0xd76/0x1240 [ 224.067439][ T30] ? watchdog+0xd69/0x1240 [ 224.071885][ T30] watchdog+0xd87/0x1240 [ 224.076157][ T30] ? __pfx_watchdog+0x10/0x10 [ 224.080857][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.086087][ T30] ? __kthread_parkme+0x148/0x220 [ 224.091148][ T30] ? __pfx_watchdog+0x10/0x10 [ 224.095854][ T30] kthread+0x2c1/0x3a0 [ 224.099973][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.105200][ T30] ? __pfx_kthread+0x10/0x10 [ 224.109817][ T30] ret_from_fork+0x45/0x80 [ 224.114259][ T30] ? __pfx_kthread+0x10/0x10 [ 224.118883][ T30] ret_from_fork_asm+0x1a/0x30 [ 224.123693][ T30] [ 224.126853][ T30] Kernel Offset: disabled [ 224.131171][ T30] Rebooting in 86400 seconds..