last executing test programs: 8.019355918s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x20, 0x0, 0x80000001, 0xf5, 0x0, 0x0, 0x0, 0x7}, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mlockall(0x3) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) 7.456230391s ago: executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) listen(r0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x1056c0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@isofs_parent={0x14, 0x2, {0x112}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) 7.391691351s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r1 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040)) 6.454284761s ago: executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.100072806s ago: executing program 0: io_uring_setup(0x53c3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) 5.997132522s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x10181}], 0x1, 0x0, 0x0, 0x0) 5.401311844s ago: executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd"}) getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002021", 0x42}, {&(0x7f0000000200)="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", 0xe96}], 0x2}, 0x0) 5.180397302s ago: executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x80, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x62, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @val={0x1, 0x8, [{0x1b}, {0x1b}, {}, {0x9}, {0xb}, {0x60}, {}, {}]}, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x44, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xfb}}, @val={0x72, 0x6}, @void, @void}}]]}, 0x80}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1f}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='%9'], 0x33fe0) 4.165705323s ago: executing program 0: fanotify_init(0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000004180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600104480f8a3aff20010000000000000000000000000001fe8000000000000000000000000000aa87009078ff01000000000000000000000000000100ee5695c36608520d9d84eccbb74087c097c23599b1968c79a6ed2a475d914d17db390958abfbccccbf39960bc5db77821b2d5050778b0a15fdb7c600409eb129708c1703f29eb15aa519563faaf4e52d25048c38ce397afb951786953141c455dfe3ea16f5cfcd4dea9ed64acd6354fa639b6d5620fac10b257d1c8a63ef21c12a271fde55d3bc9b79abf4448dfc10c1b03ce0fa41cee68f76aaf9aa2ec7cb523c24f655d08aa1aa3211d415dbeb05b19d4420daf7c2d80db142b08a990bea5145828c7d4eb7b651f9fb80baeca7b445a18ee199a12e90a6739aef1d29d6e39e4d9e78efacb584315153650aa8cf10d49c94f6066a3dbc840fda8c6849e5eba3bc6c1f3a6973f81476a0b77accda03719a62f7339c7924bea439dd2f50b7297b71e57815b528ce2b69a13190c3678c146e9e0f7d520fdca579bb443581c9cef0b4dcf8ab861e0e1f9cc59c842c8e37d2c96bbd4b00644ba49ad92d359b8481312f5df8efe97fded035baeab9346b699627ec136606c65e89583ec415e29e8bc6acf2231fa657f52484d8258cb14c544928a50caf540dba14b19b3df10b6cc5b14790fc6f63c01bcd37a4f16de7fd6af2d16b1185cbc22505e91d47c24fa893a52d735ee2efbe2986091e37f4b4868218e851c38a0f3e82d79089d4538171b3b4e05dcc121a66cd5ee1b332aca7389d8624bde9482c9d3fac1978a66faeb09add0c6381c9346a16549817de9ec569feb539b14f24593e83687a1e46911e5ccfa5d739afadc3e3ff1752ab81324d9e1459340fd3f201ca55821f6bde3b2842c2602c3e8b677472beebe0996ba8e7d872ad15f9159746cf7d21f6bae3f3e5c3d3f1295e2e24545272e92887a4e576224419f464f7a98576f884be6002484a828244d03045bf61d3931dc2ef4989f15a21a7f4fd439babb06cf3dc4ad8652a6375c4d63fa9ff4d0567602e08dbe7e6f099ebb5d4c8cba8ddbcb0"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0xa0}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4004888) 4.081532618s ago: executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2a2, @time}) 3.940570985s ago: executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0x288e, 0x4b3f, 0x4e61, 0x82f6, 0xc, "257cdfe72ae3360d"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x80}, 0x659}, {@broadcast}, {@multicast2, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@remote}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b0}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0x100000530) recvmmsg(r7, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r8, &(0x7f00000005c0), 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 3.812820758s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 3.63829909s ago: executing program 4: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3.40776611s ago: executing program 2: socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = syz_io_uring_setup(0x73d, &(0x7f0000000240), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.654784169s ago: executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$l2tp6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @remote}, 0x20) 2.640379506s ago: executing program 2: r0 = open(0x0, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xe9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 2.617577874s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40044103, 0x0) 2.481456354s ago: executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendto$packet(r2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0xd5, 0x0, 0x0, 0x0, 0x0, 0x6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 2.371975569s ago: executing program 1: io_uring_setup(0x53c3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) 2.348960501s ago: executing program 3: syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000400)=""/206, 0xce}], 0x1, 0x400009f, 0x0) 2.152494388s ago: executing program 0: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={'poly1305\x00'}}) 2.09196053s ago: executing program 3: socket$inet6(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff) getpid() sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f00000000c0)={'syzkaller1\x00', @multicast}) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.089379503s ago: executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x80, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x62, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @val={0x1, 0x8, [{0x1b}, {0x1b}, {}, {0x9}, {0xb}, {0x60}, {}, {}]}, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x44, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xfb}}, @val={0x72, 0x6}, @void, @void}}]]}, 0x80}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1f}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='%9'], 0x33fe0) 1.79128317s ago: executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd"}) getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002021", 0x42}, {&(0x7f0000000200)="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", 0xe96}], 0x2}, 0x0) 1.385377359s ago: executing program 2: r0 = eventfd(0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) io_submit(0x0, 0x1, &(0x7f00000015c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 1.197890667s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10181}], 0x1, 0x0, 0x0, 0x0) 1.109763246s ago: executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x220001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) 443.727285ms ago: executing program 1: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 136.337325ms ago: executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x2e0, 0x9, 0x6c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x407fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x2c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. 2024/06/16 06:42:27 fuzzer started 2024/06/16 06:42:27 dialing manager at 10.128.0.169:30006 [ 76.265998][ T29] audit: type=1400 audit(1718520147.752:87): avc: denied { node_bind } for pid=5074 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 76.292855][ T29] audit: type=1400 audit(1718520147.782:88): avc: denied { name_bind } for pid=5074 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.598669][ T29] audit: type=1400 audit(1718520148.082:89): avc: denied { create } for pid=5084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.668414][ T5083] cgroup: Unknown subsys name 'net' [ 76.698374][ T29] audit: type=1400 audit(1718520148.092:90): avc: denied { write } for pid=5084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.747565][ T29] audit: type=1400 audit(1718520148.092:91): avc: denied { read } for pid=5084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.768322][ T29] audit: type=1400 audit(1718520148.132:92): avc: denied { mounton } for pid=5090 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 76.793704][ T29] audit: type=1400 audit(1718520148.132:94): avc: denied { mounton } for pid=5083 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 76.823265][ T29] audit: type=1400 audit(1718520148.132:93): avc: denied { mount } for pid=5090 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 76.830121][ T5095] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 76.847498][ T29] audit: type=1400 audit(1718520148.142:95): avc: denied { mount } for pid=5083 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.877889][ T29] audit: type=1400 audit(1718520148.162:96): avc: denied { setattr } for pid=5091 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.114832][ T5083] cgroup: Unknown subsys name 'rlimit' 2024/06/16 06:42:29 starting 5 executor processes [ 78.251330][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.151704][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.160239][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.170784][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.178980][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.188883][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.192828][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.214438][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.233896][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.235514][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.241769][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.250129][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.259403][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.269838][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.278445][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.278602][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.285996][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.293949][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.301658][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.307193][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.314320][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.321369][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.329331][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.342123][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.351047][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.352935][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.358754][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.366349][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.382989][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.390547][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.397609][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 81.397624][ T29] audit: type=1400 audit(1718520152.882:111): avc: denied { read } for pid=5118 comm="syz-executor.1" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.426212][ T29] audit: type=1400 audit(1718520152.882:112): avc: denied { open } for pid=5118 comm="syz-executor.1" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.439602][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.464642][ T29] audit: type=1400 audit(1718520152.882:113): avc: denied { mounton } for pid=5118 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.027744][ T29] audit: type=1400 audit(1718520153.502:114): avc: denied { module_request } for pid=5118 comm="syz-executor.1" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.234636][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 82.303311][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 82.476136][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 82.520009][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 82.634989][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 82.783551][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.791600][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.800394][ T5118] bridge_slave_0: entered allmulticast mode [ 82.810662][ T5118] bridge_slave_0: entered promiscuous mode [ 82.842326][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.852746][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.860157][ T5104] bridge_slave_0: entered allmulticast mode [ 82.870539][ T5104] bridge_slave_0: entered promiscuous mode [ 82.892714][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.899906][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.907175][ T5118] bridge_slave_1: entered allmulticast mode [ 82.914228][ T5118] bridge_slave_1: entered promiscuous mode [ 82.951044][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.958326][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.965473][ T5104] bridge_slave_1: entered allmulticast mode [ 82.973505][ T5104] bridge_slave_1: entered promiscuous mode [ 83.069873][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.077200][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.084719][ T5110] bridge_slave_0: entered allmulticast mode [ 83.094642][ T5110] bridge_slave_0: entered promiscuous mode [ 83.120252][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.133161][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.171772][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.183097][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.190658][ T5110] bridge_slave_1: entered allmulticast mode [ 83.201098][ T5110] bridge_slave_1: entered promiscuous mode [ 83.253220][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.260820][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.268701][ T5114] bridge_slave_0: entered allmulticast mode [ 83.275855][ T5114] bridge_slave_0: entered promiscuous mode [ 83.287594][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.327429][ T5104] team0: Port device team_slave_0 added [ 83.333823][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.341179][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.349185][ T5114] bridge_slave_1: entered allmulticast mode [ 83.357315][ T5114] bridge_slave_1: entered promiscuous mode [ 83.366065][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.391564][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.405799][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.434340][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.442063][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.447667][ T5108] Bluetooth: hci1: command tx timeout [ 83.449380][ T5107] Bluetooth: hci4: command tx timeout [ 83.460842][ T5102] bridge_slave_0: entered allmulticast mode [ 83.469619][ T5102] bridge_slave_0: entered promiscuous mode [ 83.481092][ T5104] team0: Port device team_slave_1 added [ 83.525946][ T5107] Bluetooth: hci3: command tx timeout [ 83.526004][ T5108] Bluetooth: hci2: command tx timeout [ 83.531804][ T4478] Bluetooth: hci0: command tx timeout [ 83.548821][ T5118] team0: Port device team_slave_0 added [ 83.571196][ T5118] team0: Port device team_slave_1 added [ 83.578529][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.585710][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.593556][ T5102] bridge_slave_1: entered allmulticast mode [ 83.602254][ T5102] bridge_slave_1: entered promiscuous mode [ 83.655221][ T5110] team0: Port device team_slave_0 added [ 83.704262][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.711323][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.737657][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.753851][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.766850][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.779477][ T5110] team0: Port device team_slave_1 added [ 83.813495][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.820751][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.847340][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.904280][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.911959][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.938694][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.953253][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.960366][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.987623][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.001878][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.018315][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.049181][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.056173][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.082614][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.138858][ T5102] team0: Port device team_slave_0 added [ 84.150425][ T5114] team0: Port device team_slave_0 added [ 84.157762][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.164727][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.191337][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.206427][ T5102] team0: Port device team_slave_1 added [ 84.219313][ T5114] team0: Port device team_slave_1 added [ 84.352647][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.359672][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.385915][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.399351][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.406308][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.433016][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.468205][ T5118] hsr_slave_0: entered promiscuous mode [ 84.474725][ T5118] hsr_slave_1: entered promiscuous mode [ 84.519194][ T5104] hsr_slave_0: entered promiscuous mode [ 84.525659][ T5104] hsr_slave_1: entered promiscuous mode [ 84.535645][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.543654][ T5104] Cannot create hsr debugfs directory [ 84.551744][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.558801][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.584852][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.633847][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.641159][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.669586][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.699266][ T5110] hsr_slave_0: entered promiscuous mode [ 84.708108][ T5110] hsr_slave_1: entered promiscuous mode [ 84.714837][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.722756][ T5110] Cannot create hsr debugfs directory [ 84.817279][ T5102] hsr_slave_0: entered promiscuous mode [ 84.823717][ T5102] hsr_slave_1: entered promiscuous mode [ 84.830174][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.838659][ T5102] Cannot create hsr debugfs directory [ 85.015642][ T5114] hsr_slave_0: entered promiscuous mode [ 85.023892][ T5114] hsr_slave_1: entered promiscuous mode [ 85.030415][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.038376][ T5114] Cannot create hsr debugfs directory [ 85.517407][ T4478] Bluetooth: hci4: command tx timeout [ 85.522870][ T4478] Bluetooth: hci1: command tx timeout [ 85.530893][ T5104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.544387][ T5104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.569928][ T5104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.592108][ T5104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.605011][ T5107] Bluetooth: hci3: command tx timeout [ 85.610404][ T5108] Bluetooth: hci2: command tx timeout [ 85.615998][ T4478] Bluetooth: hci0: command tx timeout [ 85.659383][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.675202][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.686541][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.720440][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.817773][ T5114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.828975][ T5114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.855196][ T5114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.873092][ T5114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.018995][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.029541][ T5102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.044213][ T5102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.072159][ T5102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.084998][ T5102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.126104][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.193355][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.200846][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.282496][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.289638][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.310232][ T5118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.337391][ T5118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.349389][ T5118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.390444][ T5118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.523770][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.564870][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.601298][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.669231][ T29] audit: type=1400 audit(1718520158.152:115): avc: denied { sys_module } for pid=5104 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.706281][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.713445][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.726144][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.733297][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.785958][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.865915][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.873223][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.924536][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.931766][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.950397][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.004539][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.038965][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.070198][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.090820][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.141314][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.161515][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.168851][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.249659][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.256866][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.280875][ T928] cfg80211: failed to load regulatory.db [ 87.296435][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.376441][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.383707][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.396018][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.403270][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.461473][ T5104] veth0_vlan: entered promiscuous mode [ 87.533493][ T5104] veth1_vlan: entered promiscuous mode [ 87.597930][ T4478] Bluetooth: hci1: command tx timeout [ 87.603381][ T4478] Bluetooth: hci4: command tx timeout [ 87.652418][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.677294][ T4478] Bluetooth: hci2: command tx timeout [ 87.682751][ T4478] Bluetooth: hci0: command tx timeout [ 87.688983][ T5107] Bluetooth: hci3: command tx timeout [ 87.726669][ T5104] veth0_macvtap: entered promiscuous mode [ 87.771567][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.804546][ T5104] veth1_macvtap: entered promiscuous mode [ 87.980860][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.032400][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.083985][ T5114] veth0_vlan: entered promiscuous mode [ 88.114123][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.138350][ T5104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.154771][ T5104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.165871][ T5104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.183028][ T5104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.230713][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.255660][ T5110] veth0_vlan: entered promiscuous mode [ 88.299760][ T5114] veth1_vlan: entered promiscuous mode [ 88.380503][ T5110] veth1_vlan: entered promiscuous mode [ 88.485658][ T5114] veth0_macvtap: entered promiscuous mode [ 88.531381][ T5114] veth1_macvtap: entered promiscuous mode [ 88.573204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.585038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.621040][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.633052][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.646613][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.691487][ T5110] veth0_macvtap: entered promiscuous mode [ 88.702068][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.713157][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.731479][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.749784][ T5118] veth0_vlan: entered promiscuous mode [ 88.768850][ T5110] veth1_macvtap: entered promiscuous mode [ 88.799998][ T5114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.809265][ T5114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.818125][ T5114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.826823][ T5114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.851731][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.865459][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.868808][ T5118] veth1_vlan: entered promiscuous mode [ 88.926756][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.938618][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.949088][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.962741][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.974997][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.012695][ T5102] veth0_vlan: entered promiscuous mode [ 89.019712][ T29] audit: type=1400 audit(1718520160.512:116): avc: denied { mounton } for pid=5104 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.043256][ T5102] veth1_vlan: entered promiscuous mode [ 89.061367][ T29] audit: type=1400 audit(1718520160.512:117): avc: denied { mount } for pid=5104 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.104037][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.123314][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.133837][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.144459][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.156260][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.182157][ T5118] veth0_macvtap: entered promiscuous mode [ 89.201752][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.215485][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.237068][ T29] audit: type=1400 audit(1718520160.712:118): avc: denied { read write } for pid=5104 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.237757][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.277288][ T29] audit: type=1400 audit(1718520160.712:119): avc: denied { open } for pid=5104 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.313822][ T29] audit: type=1400 audit(1718520160.712:120): avc: denied { ioctl } for pid=5104 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.339569][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.354518][ T29] audit: type=1400 audit(1718520160.802:121): avc: denied { create } for pid=5192 comm="syz-executor.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.382741][ T5118] veth1_macvtap: entered promiscuous mode [ 89.394508][ T29] audit: type=1400 audit(1718520160.802:122): avc: denied { wake_alarm } for pid=5192 comm="syz-executor.2" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.525844][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.543338][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.573620][ T5102] veth0_macvtap: entered promiscuous mode [ 89.587681][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.599488][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.610012][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.620841][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.630700][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.642250][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.653537][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.677595][ T4478] Bluetooth: hci4: command tx timeout [ 89.683034][ T4478] Bluetooth: hci1: command tx timeout [ 89.701597][ T5102] veth1_macvtap: entered promiscuous mode [ 89.765149][ T5107] Bluetooth: hci0: command tx timeout [ 89.765159][ T5108] Bluetooth: hci3: command tx timeout [ 89.771956][ T4478] Bluetooth: hci2: command tx timeout [ 89.783499][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.794535][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.794589][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.810106][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.820643][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.831797][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.842055][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.852526][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.864548][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.875991][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.893297][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.909691][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.922911][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.931840][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.940720][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.966347][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.983432][ T29] audit: type=1400 audit(1718520161.472:123): avc: denied { mounton } for pid=5114 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.987417][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.018699][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.032527][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.042497][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.053040][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.063005][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.073492][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.094701][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.141456][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.163931][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.182585][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.195144][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.213208][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.224136][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.234399][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.246559][ T29] audit: type=1400 audit(1718520161.742:124): avc: denied { bind } for pid=5195 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.246935][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.281151][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.315766][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.349827][ T5102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.362609][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.389778][ T5102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.435537][ T5102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.446732][ T5102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.447932][ T5200] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.807163][ T2833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.815025][ T2833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.009602][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.029993][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.108248][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.146415][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.261797][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.306516][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.774245][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 91.774264][ T29] audit: type=1400 audit(1718520163.262:146): avc: denied { call } for pid=5206 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.899216][ T29] audit: type=1400 audit(1718520163.302:147): avc: denied { read } for pid=5220 comm="syz-executor.4" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.998024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.007058][ T29] audit: type=1400 audit(1718520163.302:148): avc: denied { open } for pid=5220 comm="syz-executor.4" path="/dev/input/event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.030359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.143963][ T29] audit: type=1400 audit(1718520163.332:149): avc: denied { ioctl } for pid=5220 comm="syz-executor.4" path="/dev/input/event0" dev="devtmpfs" ino=834 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.272343][ T29] audit: type=1400 audit(1718520163.592:150): avc: denied { read } for pid=5222 comm="syz-executor.3" name="video7" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.442295][ T29] audit: type=1400 audit(1718520163.592:151): avc: denied { open } for pid=5222 comm="syz-executor.3" path="/dev/video7" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.570468][ T29] audit: type=1400 audit(1718520163.592:152): avc: denied { ioctl } for pid=5222 comm="syz-executor.3" path="/dev/video7" dev="devtmpfs" ino=867 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.610471][ T5232] loop3: detected capacity change from 0 to 64 [ 92.628113][ T5229] loop4: detected capacity change from 0 to 2048 [ 92.658969][ T5232] ======================================================= [ 92.658969][ T5232] WARNING: The mand mount option has been deprecated and [ 92.658969][ T5232] and is ignored by this kernel. Remove the mand [ 92.658969][ T5232] option from the mount to silence this warning. [ 92.658969][ T5232] ======================================================= [ 92.752819][ T5229] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.782493][ T29] audit: type=1400 audit(1718520163.992:153): avc: denied { prog_load } for pid=5224 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.880749][ T29] audit: type=1400 audit(1718520164.002:154): avc: denied { bpf } for pid=5224 comm="syz-executor.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.925210][ T5229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.941564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 93.001368][ T29] audit: type=1400 audit(1718520164.002:155): avc: denied { perfmon } for pid=5224 comm="syz-executor.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.477015][ T5236] loop3: detected capacity change from 0 to 32768 [ 95.719498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.917777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.927653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 96.037438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.326798][ T5245] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 96.467258][ T5249] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 96.696731][ T5245] syz-executor.4 (5245) used greatest stack depth: 21312 bytes left [ 96.753214][ T5249] syz-executor.4 (5249) used greatest stack depth: 20960 bytes left [ 96.948798][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 96.948818][ T29] audit: type=1400 audit(1718520168.442:181): avc: denied { bind } for pid=5257 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.207073][ T29] audit: type=1400 audit(1718520168.472:182): avc: denied { name_bind } for pid=5257 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.662291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.938661][ T29] audit: type=1400 audit(1718520168.472:183): avc: denied { node_bind } for pid=5257 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 98.056529][ T29] audit: type=1400 audit(1718520168.492:184): avc: denied { connect } for pid=5257 comm="syz-executor.4" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.138930][ T29] audit: type=1400 audit(1718520168.492:185): avc: denied { name_connect } for pid=5257 comm="syz-executor.4" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.257245][ T29] audit: type=1400 audit(1718520168.582:186): avc: denied { create } for pid=5259 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.332257][ T29] audit: type=1400 audit(1718520168.582:187): avc: denied { setopt } for pid=5259 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.429935][ T29] audit: type=1400 audit(1718520169.492:188): avc: denied { create } for pid=5240 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.529471][ T29] audit: type=1400 audit(1718520169.822:189): avc: denied { setopt } for pid=5271 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.635438][ T29] audit: type=1400 audit(1718520169.822:190): avc: denied { write } for pid=5271 comm="syz-executor.1" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.943777][ T5279] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.952861][ T5283] loop2: detected capacity change from 0 to 32768 [ 100.471139][ T5285] loop0: detected capacity change from 0 to 32768 [ 100.853970][ T5283] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 100.862561][ T5283] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 101.218828][ T5283] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 101.237566][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 101.272157][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 101.501385][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 229ms [ 101.552054][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 101.588099][ T5283] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 101.604799][ T5283] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 102.833346][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 102.833364][ T29] audit: type=1400 audit(1718520174.322:199): avc: denied { create } for pid=5300 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 102.883084][ T5301] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.946501][ T5301] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.211314][ T5301] Cannot find add_set index 0 as target [ 104.062298][ T29] audit: type=1400 audit(1718520175.552:200): avc: denied { write } for pid=5311 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.121255][ T5314] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 104.166007][ T5314] hsr0: entered promiscuous mode [ 104.198592][ T5314] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.227408][ T29] audit: type=1400 audit(1718520175.712:201): avc: denied { create } for pid=5315 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.291313][ T29] audit: type=1400 audit(1718520175.722:202): avc: denied { bind } for pid=5315 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.367180][ T29] audit: type=1400 audit(1718520175.742:203): avc: denied { write } for pid=5315 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.713573][ T29] audit: type=1400 audit(1718520175.832:204): avc: denied { ioctl } for pid=5292 comm="syz-executor.3" path="socket:[8056]" dev="sockfs" ino=8056 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.324189][ T29] audit: type=1400 audit(1718520176.812:205): avc: denied { ioctl } for pid=5328 comm="syz-executor.2" path="socket:[6690]" dev="sockfs" ino=6690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.594982][ T5348] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 106.775752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.167070][ T29] audit: type=1400 audit(1718520178.642:206): avc: denied { ioctl } for pid=5347 comm="syz-executor.1" path="socket:[8079]" dev="sockfs" ino=8079 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.591280][ T29] audit: type=1400 audit(1718520179.072:207): avc: denied { create } for pid=5355 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.639364][ T29] audit: type=1400 audit(1718520179.082:208): avc: denied { setopt } for pid=5355 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.937973][ T5165] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.161783][ T5165] usb 2-1: Using ep0 maxpacket: 8 [ 108.200009][ T5165] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.232925][ T5165] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.267736][ T5165] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.301800][ T5165] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.329632][ T5165] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.344423][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.677323][ T5165] usb 2-1: GET_CAPABILITIES returned 0 [ 108.695668][ T5165] usbtmc 2-1:16.0: can't read capabilities [ 108.919970][ T5370] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.921096][ T29] audit: type=1400 audit(1718520180.412:209): avc: denied { write } for pid=5369 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.959904][ T5165] usb 2-1: USB disconnect, device number 2 [ 109.048438][ T29] audit: type=1400 audit(1718520180.412:210): avc: denied { nlmsg_write } for pid=5369 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.454430][ T5364] loop4: detected capacity change from 0 to 32768 [ 110.087081][ T29] audit: type=1400 audit(1718520181.572:211): avc: denied { write } for pid=5363 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.250401][ T29] audit: type=1400 audit(1718520181.602:212): avc: denied { add_name } for pid=5363 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.292500][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.357416][ T29] audit: type=1400 audit(1718520181.602:213): avc: denied { create } for pid=5363 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 110.399474][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.921888][ T29] audit: type=1400 audit(1718520182.402:214): avc: denied { create } for pid=5384 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.301253][ T29] audit: type=1400 audit(1718520182.652:216): avc: denied { setopt } for pid=5384 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.748819][ T29] audit: type=1400 audit(1718520182.432:215): avc: denied { bind } for pid=5384 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.875330][ T29] audit: type=1400 audit(1718520182.892:217): avc: denied { accept } for pid=5384 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.004471][ T29] audit: type=1400 audit(1718520183.472:218): avc: denied { watch watch_reads } for pid=5397 comm="syz-executor.2" path="pipe:[6853]" dev="pipefs" ino=6853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 112.479874][ T5403] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 112.489974][ T5403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 112.626547][ T5389] sctp: [Deprecated]: syz-executor.1 (pid 5389) Use of int in max_burst socket option deprecated. [ 112.626547][ T5389] Use struct sctp_assoc_value instead [ 112.660963][ T5165] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.887144][ T5165] usb 5-1: Using ep0 maxpacket: 8 [ 112.913034][ T5165] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.967806][ T5165] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.998002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.003105][ T5165] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.037457][ T5165] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.062944][ T5165] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.116428][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.376887][ T5165] usb 5-1: GET_CAPABILITIES returned 0 [ 113.403406][ T5165] usbtmc 5-1:16.0: can't read capabilities [ 113.580865][ T5161] usb 5-1: USB disconnect, device number 2 [ 113.927419][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 113.927438][ T29] audit: type=1800 audit(1718520185.422:223): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 114.642428][ T29] audit: type=1400 audit(1718520186.132:224): avc: denied { ioctl } for pid=5437 comm="syz-executor.1" path="socket:[8225]" dev="sockfs" ino=8225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.667309][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.847588][ T5444] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.886629][ T29] audit: type=1800 audit(1718520186.372:225): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=1965 res=0 errno=0 [ 114.965827][ T29] audit: type=1326 audit(1718520186.452:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fc127cea9 code=0x0 [ 115.795097][ T29] audit: type=1400 audit(1718520187.282:227): avc: denied { read } for pid=5457 comm="syz-executor.1" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.801790][ T5458] ufs: You didn't specify the type of your ufs filesystem [ 115.801790][ T5458] [ 115.801790][ T5458] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 115.801790][ T5458] [ 115.801790][ T5458] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 115.887241][ T29] audit: type=1400 audit(1718520187.282:228): avc: denied { open } for pid=5457 comm="syz-executor.1" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.910555][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.953950][ T5458] ufs: ufstype=old is supported read-only [ 116.004008][ T29] audit: type=1400 audit(1718520187.482:229): avc: denied { create } for pid=5459 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 116.019495][ T5458] ufs: ufs_fill_super(): bad magic number [ 116.247584][ T29] audit: type=1400 audit(1718520187.732:230): avc: denied { map } for pid=5459 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.333473][ T29] audit: type=1400 audit(1718520187.732:231): avc: denied { write } for pid=5459 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.519897][ T5161] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.597093][ T5165] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.693046][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.720209][ T5161] usb 1-1: Using ep0 maxpacket: 8 [ 116.728444][ T5161] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.747489][ T5161] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.797056][ T5161] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.817385][ T5165] usb 2-1: Using ep0 maxpacket: 8 [ 116.828165][ T5161] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.857104][ T5165] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 116.865434][ T5165] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.881998][ T5161] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.901267][ T5165] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.911113][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.935932][ T5165] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.970395][ T5165] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.080921][ T5165] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.129506][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.160625][ T5161] usb 1-1: GET_CAPABILITIES returned 0 [ 117.181060][ T5161] usbtmc 1-1:16.0: can't read capabilities [ 117.373716][ T8] usb 1-1: USB disconnect, device number 2 [ 117.447375][ T5165] usb 2-1: usb_control_msg returned -32 [ 117.469196][ T5165] usbtmc 2-1:16.0: can't read capabilities [ 118.554874][ T29] audit: type=1326 audit(1718520190.042:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e367cea9 code=0x0 [ 118.957355][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 118.957374][ T29] audit: type=1400 audit(1718520190.442:234): avc: denied { write } for pid=5498 comm="syz-executor.2" path="socket:[8329]" dev="sockfs" ino=8329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.357129][ T29] audit: type=1400 audit(1718520190.832:235): avc: denied { create } for pid=5486 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.417168][ T5165] usb 2-1: USB disconnect, device number 3 [ 119.591531][ T29] audit: type=1400 audit(1718520190.842:236): avc: denied { ioctl } for pid=5486 comm="syz-executor.0" path="socket:[8331]" dev="sockfs" ino=8331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.630546][ T29] audit: type=1400 audit(1718520190.882:237): avc: denied { bind } for pid=5486 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.743124][ T29] audit: type=1400 audit(1718520191.232:238): avc: denied { map } for pid=5505 comm="syz-executor.3" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.951310][ T29] audit: type=1400 audit(1718520191.442:239): avc: denied { create } for pid=5511 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.008636][ T5502] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 120.033049][ T5502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 120.037132][ T29] audit: type=1400 audit(1718520191.472:240): avc: denied { bind } for pid=5511 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.158039][ T29] audit: type=1400 audit(1718520191.472:241): avc: denied { name_bind } for pid=5511 comm="syz-executor.3" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 120.206521][ T29] audit: type=1400 audit(1718520191.472:242): avc: denied { node_bind } for pid=5511 comm="syz-executor.3" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 120.228721][ T5165] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.447326][ T5165] usb 2-1: Using ep0 maxpacket: 8 [ 120.495188][ T5165] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.520320][ T5165] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.566264][ T5165] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.596748][ T5165] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.631322][ T5165] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.671413][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.923092][ T29] audit: type=1400 audit(1718520192.412:243): avc: denied { open } for pid=5531 comm="syz-executor.2" path="/dev/ptyq8" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 120.969122][ T5165] usb 2-1: GET_CAPABILITIES returned 0 [ 120.974922][ T5165] usbtmc 2-1:16.0: can't read capabilities [ 121.154387][ T5157] usb 2-1: USB disconnect, device number 4 [ 121.579620][ T5165] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.778038][ T5165] usb 5-1: Using ep0 maxpacket: 8 [ 121.852112][ T5165] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 121.909517][ T5165] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.020945][ T5165] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.080706][ T5165] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.092312][ T5165] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.105939][ T5165] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.131227][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.176987][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 227.184033][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3882/1:b..l [ 227.192363][ C1] rcu: (detected by 1, t=10502 jiffies, g=12049, q=610 ncpus=2) [ 227.200114][ C1] task:kworker/u8:10 state:R running task stack:22560 pid:3882 tgid:3882 ppid:2 flags:0x00004000 [ 227.212695][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 227.219002][ C1] Call Trace: [ 227.222293][ C1] [ 227.225233][ C1] __schedule+0xf15/0x5d00 [ 227.229678][ C1] ? __pfx_mark_lock+0x10/0x10 [ 227.234464][ C1] ? __pfx___schedule+0x10/0x10 [ 227.239343][ C1] ? mark_held_locks+0x9f/0xe0 [ 227.244128][ C1] preempt_schedule_irq+0x51/0x90 [ 227.249178][ C1] irqentry_exit+0x36/0x90 [ 227.253615][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.259619][ C1] RIP: 0010:ieee80211_sta_get_rates+0x361/0x650 [ 227.265888][ C1] Code: 83 c2 03 38 ca 7c 08 84 c9 0f 85 32 02 00 00 45 8b 3e 44 89 e6 45 21 e7 44 89 ff e8 59 01 2a f7 45 39 e7 75 82 e8 0f 07 2a f7 <49> 8d 7e 04 48 89 fa 48 c1 ea 03 42 0f b6 0c 2a 48 89 fa 83 e2 07 [ 227.285512][ C1] RSP: 0018:ffffc9000bcef958 EFLAGS: 00000293 [ 227.291595][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8a63de37 [ 227.299575][ C1] RDX: ffff88802d7bbc00 RSI: ffffffff8a63de41 RDI: 0000000000000004 [ 227.307562][ C1] RBP: 0000000000000002 R08: 0000000000000004 R09: 0000000000000000 [ 227.315542][ C1] R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000 [ 227.323523][ C1] R13: dffffc0000000000 R14: ffff888059fb5c30 R15: 0000000000000000 [ 227.331518][ C1] ? ieee80211_sta_get_rates+0x357/0x650 [ 227.337173][ C1] ? ieee80211_sta_get_rates+0x361/0x650 [ 227.342825][ C1] ? ieee80211_sta_get_rates+0x361/0x650 [ 227.348472][ C1] ieee80211_ibss_rx_queued_mgmt+0x1039/0x2f40 [ 227.354650][ C1] ? hlock_class+0x4e/0x130 [ 227.359173][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 227.365778][ C1] ? lock_acquire+0x1b1/0x560 [ 227.370483][ C1] ? find_held_lock+0x2d/0x110 [ 227.375261][ C1] ? find_held_lock+0x2d/0x110 [ 227.380042][ C1] ? kcov_remote_start+0x372/0x6e0 [ 227.385181][ C1] ? mark_held_locks+0x9f/0xe0 [ 227.389967][ C1] ? kcov_remote_start+0x3d1/0x6e0 [ 227.395100][ C1] ieee80211_iface_work+0xc07/0xf00 [ 227.400318][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.405542][ C1] cfg80211_wiphy_work+0x255/0x330 [ 227.410680][ C1] process_one_work+0x9fb/0x1b60 [ 227.415638][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 227.421289][ C1] ? __pfx_process_one_work+0x10/0x10 [ 227.426676][ C1] ? assign_work+0x1a0/0x250 [ 227.431289][ C1] worker_thread+0x6c8/0xf70 [ 227.435891][ C1] ? __kthread_parkme+0x148/0x220 [ 227.440933][ C1] ? __pfx_worker_thread+0x10/0x10 [ 227.446056][ C1] kthread+0x2c1/0x3a0 [ 227.450140][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.455359][ C1] ? __pfx_kthread+0x10/0x10 [ 227.459965][ C1] ret_from_fork+0x45/0x80 [ 227.464401][ C1] ? __pfx_kthread+0x10/0x10 [ 227.469010][ C1] ret_from_fork_asm+0x1a/0x30 [ 227.473798][ C1] [ 227.476836][ C1] rcu: rcu_preempt kthread starved for 10434 jiffies! g12049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 227.488043][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 227.498022][ C1] rcu: RCU grace-period kthread stack dump: [ 227.503910][ C1] task:rcu_preempt state:R running task stack:27360 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 227.515667][ C1] Call Trace: [ 227.518958][ C1] [ 227.521910][ C1] __schedule+0xf15/0x5d00 [ 227.526363][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 227.531600][ C1] ? __pfx___schedule+0x10/0x10 [ 227.536476][ C1] ? schedule+0x298/0x350 [ 227.540831][ C1] ? __pfx_lock_release+0x10/0x10 [ 227.545878][ C1] ? __pfx___mod_timer+0x10/0x10 [ 227.550917][ C1] ? lock_acquire+0x1b1/0x560 [ 227.555618][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 227.561103][ C1] schedule+0xe7/0x350 [ 227.565196][ C1] schedule_timeout+0x136/0x2a0 [ 227.570066][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 227.575456][ C1] ? __pfx_process_timeout+0x10/0x10 [ 227.580761][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 227.586590][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 227.592076][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 227.596863][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 227.602168][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.607386][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.613220][ C1] rcu_gp_kthread+0x271/0x380 [ 227.617925][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.623143][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.628356][ C1] ? __kthread_parkme+0x148/0x220 [ 227.633397][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.638615][ C1] kthread+0x2c1/0x3a0 [ 227.642702][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.647919][ C1] ? __pfx_kthread+0x10/0x10 [ 227.652527][ C1] ret_from_fork+0x45/0x80 [ 227.657036][ C1] ? __pfx_kthread+0x10/0x10 [ 227.661641][ C1] ret_from_fork_asm+0x1a/0x30 [ 227.666431][ C1] [ 227.669457][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 227.675805][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 227.685532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 227.695596][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 227.700904][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 b3 1b 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 1f b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 227.720531][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 227.726613][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae80889 [ 227.734596][ C1] RDX: 0000000000000001 RSI: ffff888019a8e000 RDI: ffff888019a8e064 [ 227.742576][ C1] RBP: ffff888019a8e064 R08: 0000000000000001 R09: ffffed1017266fe5 [ 227.750555][ C1] R10: ffff8880b9337f2b R11: 0000000000000000 R12: ffff888019fae800 [ 227.758535][ C1] R13: ffffffff8e744e60 R14: 0000000000000001 R15: 0000000000000000 [ 227.766515][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 227.775459][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.782055][ C1] CR2: 00007fde8fbb6fc0 CR3: 0000000075460000 CR4: 00000000003506f0 [ 227.790042][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.798021][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.805999][ C1] Call Trace: [ 227.809291][ C1] [ 227.812141][ C1] ? show_regs+0x8c/0xa0 [ 227.816410][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 227.823284][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 227.828497][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 227.833970][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 227.839615][ C1] ? tmigr_requires_handle_remote+0x14c/0x480 [ 227.845699][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 227.852132][ C1] ? hrtimer_run_queues+0x97/0x450 [ 227.857276][ C1] ? update_process_times+0x175/0x220 [ 227.862663][ C1] ? __pfx_update_process_times+0x10/0x10 [ 227.868396][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 227.873870][ C1] ? update_wall_time+0x1c/0x40 [ 227.878744][ C1] ? tick_nohz_handler+0x376/0x530 [ 227.883871][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 227.889348][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 227.894735][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 227.900471][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 227.906571][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 227.911704][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 227.917884][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 227.923717][ C1] [ 227.926658][ C1] [ 227.929594][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.935769][ C1] ? ct_kernel_exit+0x139/0x190 [ 227.940635][ C1] ? acpi_safe_halt+0x1a/0x20 [ 227.945337][ C1] acpi_idle_enter+0xc5/0x160 [ 227.950032][ C1] cpuidle_enter_state+0x85/0x500 [ 227.955073][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 227.960899][ C1] cpuidle_enter+0x4e/0xa0 [ 227.965345][ C1] do_idle+0x313/0x3f0 [ 227.969430][ C1] ? __pfx_do_idle+0x10/0x10 [ 227.974056][ C1] cpu_startup_entry+0x4f/0x60 [ 227.978836][ C1] start_secondary+0x220/0x2b0 [ 227.983617][ C1] ? __pfx_start_secondary+0x10/0x10 [ 227.988919][ C1] common_startup_64+0x13e/0x148 [ 227.993873][ C1]