last executing test programs: 2m17.794791151s ago: executing program 0 (id=130): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000013c0)) read$dsp(r2, &(0x7f0000000440)=""/171, 0xab) lsm_list_modules(0x0, 0xfffffffffffffffe, 0x3) 2m15.99663976s ago: executing program 0 (id=132): socket$inet6(0xa, 0x3, 0x2c) socket$inet6(0xa, 0x3, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000009df00)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x5b}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xd82}]}}]}, 0x44}}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x214) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149282, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) sendfile(r5, r6, 0x0, 0x4) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$TCSETAF(r1, 0x5412, &(0x7f0000000040)={0x23, 0x6, 0x1, 0x0, 0xf, "a076dc8ac7e584a2"}) 1m50.746581704s ago: executing program 4 (id=43): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x4004095, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x38011, 0xffffffffffffffff, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000000)) syz_80211_inject_frame(0x0, 0x0, 0x22) 1m44.116710643s ago: executing program 4 (id=156): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) unshare(0x22020600) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0xee00, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) sendmsg$nl_route(r2, 0x0, 0x20000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 1m41.292530792s ago: executing program 4 (id=160): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.223647438s ago: executing program 4 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r3, &(0x7f00000005c0)=""/102384, 0x18ff0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 1m33.163834798s ago: executing program 0 (id=133): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c90012000e00050014000a0000000700ffff00000700ebea6ee4e03d68d75cfa335581346e5a2b8cb188ed33b52d161461095efb52d4a914b9a3f5b02a83d6e20d37bd6afebacf89fbe4195cf0bcfb4abdf0bad717565ecfc13ed88834d98d60a4229c28a7745957b0d897ca7cdeb2b4e65bd4499e6872046b57f62c8fb3355d1ac57aaf784bd8b05532"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000380)={0x9, 0x4, 0x8, 0xbf3, 0x1}) 1m30.526513438s ago: executing program 0 (id=170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002380)=ANY=[@ANYBLOB="aaaaaaaaaaaa365c4cfb3e2908004500002c000000000011907800000000000000000000000000186f780400"/57], 0x0) getpid() truncate(0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x1) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_emit_ethernet(0x67, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x59, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x1, 0x0, [], "7f"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 39.73290604s ago: executing program 4 (id=175): sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) r2 = syz_usb_connect(0x6, 0x24, &(0x7f00000004c0)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) unshare(0x20000400) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003d7000000d703cc3e41191396753f2aefb073bba01b29a846b37cb8d499c404135d0db9055b0e2b1d6badbad1a5dcdd521a64ef7b152886ce7afadc138d3d829c966343a3ba612ffad3afe332d49a8ad7b72ac0c2f061b461d70df8accda5e635a9139d6dbc0ddc0d5539a2b3e6052bc816b2a759323bd21838c351ff41d0068dab3e513f20358eac3cc00dcd432f419f1af35dce577096964c8e94eafb1f1d526a5a7df1df55be264af3503496ebd77b897888f901f236336eb6af1d031d8b4393a312780cba523678b7a0f864c2691b11787c8ba5e7b80b03581a"], &(0x7f0000000100)={0x0, 0x22, 0x3, {[@local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x1, 0x1, 0x2, '\b'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x892}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000600)={0x20, 0x14, 0xd5, "7d04722499c4c3d79931ac86d91d6ff1565f8ad2b96ec19890783766ac31fa4076724df49ebee7df247f5ccc19651f5838d66793bf0617fabc3cd04de7c883bf9b771df052d6dbbd4d4e86046bebbb8700ced20c684fdd145f5c8357ddb98253c1165333beac22d331691655f88fd7acd44ead878a60cd9257f8bf812723795d67ca631244195909f4b7f89195cddb59b4a640d603c44559671a3846304cbd292af895e3727683ac34f26c2a1e82bb57356d607760a894fdaeca0ead8729fbbc0080c7b6739d811c5943b572ce155068b23fc2e840"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x50, "ef3a3e5ff1c12cbbc7f8e0244418c5d4af0e8823fe42c676d98a6eea8c4c9df70258fd4ddeb1e2db1f0766c2bb0bd7b7a72ac9e6e815bcb134dbaf3073329ee0ecbdd8c7d814fada704e166295bc1104"}, &(0x7f0000000480)={0x20, 0x3, 0x1}}) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={{r3}}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="56e5566b207cb0c7c4b17f87617ed8cb", 0x10}], 0x1, 0xf739, 0x0) 35.150712431s ago: executing program 4 (id=182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_io_uring_setup(0x6291, &(0x7f0000000340)={0x0, 0x722f, 0x400, 0x2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0xfb, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xc5, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, [{}, {}, {0x0, 0xe, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}, {0x21, 0x5, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9"}, {0x0, 0x1, "d5170000dce9674a36da018dff"}]}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0108000300", @ANYRES32=r4, @ANYBLOB="05005300010000000800050002000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x7c, r3, 0x4, 0x70bd24, 0x25dfdbfd, {{}, {@val, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "95c80b8f60239e3698f17e55c2"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0xffffffd4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x80d2) socket(0x10, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$userns(0x0, &(0x7f0000000240)) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) 34.970415801s ago: executing program 0 (id=173): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000001ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000040)='F', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000180)={r6}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 17.725879815s ago: executing program 3 (id=196): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendto$inet(r0, 0x0, 0x0, 0x20008840, 0x0, 0xfd8f) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0), 0x10) socket(0x10, 0x3, 0x0) 13.851779404s ago: executing program 3 (id=197): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xe4, "ed0208d837cdfce540d5a5be7914d255a52e7273e91cdb8ae4a7e1f5ae6b90535b81385e4b4ebbfc7aa6113650672471b478ef96f0271eef0ea7a7aa116166c4d858ebcd4e383a1d9579e47312abb3eed66ff760cf1e0c4d614c5c699a2cd4b0d058933bd9c3a9760ef9827febe14e7bf5cc977a514b9f103dbc308812b33e5dab68ae8e2e98ff2893a1637261ee6235cea25deaad89e0ce3b38ae17e6d4f82cc89e7def52c20c6c7063605b91091d44ffe66a9ba7f7f2a86cbb5e6e87ac0b9d741714614c610d403fca3e795b4f9105e36fa34a50cc8102601f1c62e378829b82d8aae2"}, &(0x7f00000005c0)=0xec) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x60, r5, 0x2, 0x70bd2a, 0x25dfd3ff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100008}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044894}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000080) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xdb, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$evdev(0x0, 0x75c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 12.317104713s ago: executing program 1 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f80), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$pptp(0x18, 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f00000002c0)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 10.954877131s ago: executing program 2 (id=200): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x11c, 0x4, 0x0, 0x74efdfe049b861ab) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) r5 = io_uring_setup(0x19af, &(0x7f00000003c0)={0x0, 0xd546, 0x0, 0x0, 0xe2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 10.757169102s ago: executing program 1 (id=201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8001}, 0x48) pipe2$watch_queue(&(0x7f00000001c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000e7ffff07850000001700000018110000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x3f, 0x0, @thr={&(0x7f0000000300)="e9a8c6c37229fef72eb30bd66ecd37de639ff4faae8d1b2e7ba6ab9e978fe0143c758dfaad9911455f61ca653e1129d748", &(0x7f0000002500)="74bde49081ba49439620981140ed9140293dab5b24fe52beb0f20922077fa316416795616f239b801ccf48b43391b2c4247eaf4a3886dd03cbeb9119cdbde8b4bc9acf7d6ca4bded9d19cdb9f784a893ebbe9c1f66c145166afbfda28899bd81afcb557fbfd6703e78f07f850834040bf923d22ae651109acef9a1364a69644b2e40dded01c8c408711d6f4eba5f97838f"}}, &(0x7f0000000200)) fcntl$setlease(r2, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r3, {0x3}}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000021000f0800000000000000000a00140000000000000000000000000000011400020000000000000000000000ffffe000000100"/68], 0x44}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f000000000000000000000008000008000b0000000000e8dd803db16259fe3143fc5251ad53f854a29ecf11bf1730433c534ca4df5fa2270463c92699b006574b1ae6ef9a4a1e45ce1a7773f088614f17f66756a0426b57d371762d90ee41dfdb7f12855c0b86340c8d7e0e363c587ae35250bdf4d1d2eb781e274075cae45d448748f39ffb084e03edd37f37b434c21fe35479e748b849fe"], 0x38}}, 0x0) 9.373208744s ago: executing program 3 (id=202): add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=ghash-clmulni\x00'/40], 0x0, &(0x7f0000000440)) socket(0x8, 0xa, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') shutdown(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 9.366430038s ago: executing program 2 (id=210): r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x6, 0x6d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x21, 0x5e, 0x4f, 0x20, 0x19d2, 0x1279, 0x14f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x5, 0x1, 0xff, 0xff, 0xff, 0x52, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cb4862"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xbcc8, 0x101, 0x7}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "95005d56"}, {0x5, 0x24, 0x0, 0x25}, {0xd, 0x24, 0xf, 0x1, 0x40000000, 0x1ff, 0xf0c, 0xf9}, {0x6, 0x24, 0x1a, 0x800, 0x68}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x0, 0xc2, 0x3}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) r4 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x89ffc) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0x8, 0x42}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000003dd, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 8.068041556s ago: executing program 1 (id=203): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r4, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) 6.641448207s ago: executing program 1 (id=204): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}]}, 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$igmp6(0xa, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) unshare(0x8020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r5, r6, 0x6, 0x7, 0x8, @prog_id}, 0x20) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x1932, 0x4) 6.555450382s ago: executing program 2 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce22080000fffe80000000000000101000007f0c08fcffff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001de000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x2000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x40042, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000280)={0x2710, 0x0, &(0x7f00004e5000/0x2000)=nil}) unshare(0x6a040000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) 4.17881073s ago: executing program 1 (id=206): creat(&(0x7f0000000c00)='./file1\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x299, 0x220108, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000410800000400000000000000ee535aa1d8bf5ad30098", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000005893df66"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="0600"/15, @ANYRES8=r4, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESOCT], 0x48}}, 0x0) 4.176021985s ago: executing program 3 (id=207): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r5}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000780)) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 4.159958674s ago: executing program 2 (id=208): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socket(0x2b, 0x803, 0x80000004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x33) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = inotify_init() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xe0000011) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 2.188473247s ago: executing program 2 (id=209): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000580)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)=""/225, 0xe1}, {0x0}, {0x0}, {&(0x7f0000000800)=""/188, 0xbc}, {0x0}], 0x5, &(0x7f00000002c0)=""/30, 0x1e}}, {{0x0, 0x0, 0x0}}], 0x2, 0x77368f6b8f24eb75, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/124, 0x7c) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) 1.904049634s ago: executing program 3 (id=211): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2c060000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) wait4(0x0, 0x0, 0x20000000, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 145.608216ms ago: executing program 3 (id=212): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x3871000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="66b9630a00000f32f30f090f23403e660f388267000f1f0066b9800000c00f326635010000000f300f01c2bad004b0c0ee66b9550b000066b8654d000066ba000000000f30642626660f0da019ff", 0x4e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype0={0x4, 0xb}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) 144.716577ms ago: executing program 2 (id=213): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 1 (id=214): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b442, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r5, &(0x7f00000004c0)="e2", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0x4122, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private0}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000000)=0x10) kernel console output (not intermixed with test programs): 0 audit(1725141643.398:223): avc: denied { node_bind } for pid=5590 comm="syz.1.62" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 166.148724][ T29] audit: type=1400 audit(1725141643.678:224): avc: denied { read } for pid=5588 comm="syz.2.61" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.230057][ T5237] Bluetooth: hci5: command tx timeout [ 166.780249][ T5237] Bluetooth: hci1: command tx timeout [ 166.925219][ T5604] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 167.184189][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 168.319886][ T5237] Bluetooth: hci5: command tx timeout [ 169.877057][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 169.877082][ T29] audit: type=1400 audit(1725141647.438:234): avc: denied { read } for pid=5617 comm="syz.0.66" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.938644][ T29] audit: type=1400 audit(1725141647.478:235): avc: denied { open } for pid=5617 comm="syz.0.66" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.006662][ T29] audit: type=1400 audit(1725141647.528:236): avc: denied { ioctl } for pid=5617 comm="syz.0.66" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.216030][ T5625] overlayfs: missing 'lowerdir' [ 170.270292][ T29] audit: type=1400 audit(1725141647.748:237): avc: denied { watch } for pid=5623 comm="syz.1.67" path="/13/net_prio.prioidx" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.270393][ T29] audit: type=1400 audit(1725141647.748:238): avc: denied { watch_sb } for pid=5623 comm="syz.1.67" path="/13/net_prio.prioidx" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.380460][ T5237] Bluetooth: hci5: command tx timeout [ 177.547793][ T5620] tty tty21: ldisc open failed (-12), clearing slot 20 [ 178.222856][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.277143][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.323682][ T2973] bond0 (unregistering): Released all slaves [ 180.786147][ T5632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 181.051053][ T29] audit: type=1400 audit(1725141658.608:239): avc: denied { map } for pid=5655 comm="syz.0.74" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 181.146521][ T29] audit: type=1400 audit(1725141658.698:240): avc: denied { read } for pid=5655 comm="syz.0.74" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 181.173417][ T29] audit: type=1400 audit(1725141658.698:241): avc: denied { open } for pid=5655 comm="syz.0.74" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 182.275603][ T29] audit: type=1400 audit(1725141659.818:242): avc: denied { create } for pid=5657 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 183.913346][ T29] audit: type=1400 audit(1725141661.478:243): avc: denied { create } for pid=5671 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.016997][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.050230][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.057675][ T5532] bridge_slave_0: entered allmulticast mode [ 184.060229][ T29] audit: type=1400 audit(1725141661.578:244): avc: denied { read } for pid=5671 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.133760][ T5532] bridge_slave_0: entered promiscuous mode [ 184.479713][ T29] audit: type=1400 audit(1725141662.038:245): avc: denied { ioctl } for pid=5681 comm="syz.2.78" path="socket:[7920]" dev="sockfs" ino=7920 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 184.488965][ T5566] chnl_net:caif_netlink_parms(): no params data found [ 184.865101][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 184.876095][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 184.915690][ T5240] Bluetooth: hci4: hardware error 0x00 [ 185.151903][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.277000][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.302522][ T5532] bridge_slave_1: entered allmulticast mode [ 185.352967][ T5532] bridge_slave_1: entered promiscuous mode [ 185.386464][ T29] audit: type=1400 audit(1725141662.948:246): avc: denied { read } for pid=5682 comm="syz.1.79" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.471190][ T29] audit: type=1400 audit(1725141662.978:247): avc: denied { open } for pid=5682 comm="syz.1.79" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.776249][ T2973] hsr_slave_0: left promiscuous mode [ 185.789689][ T2973] hsr_slave_1: left promiscuous mode [ 185.812383][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.849084][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.889227][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.909107][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.027704][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.117633][ T2973] veth1_macvtap: left promiscuous mode [ 186.140754][ T2973] veth0_macvtap: left promiscuous mode [ 186.148211][ T2973] veth1_vlan: left promiscuous mode [ 186.155369][ T2973] veth0_vlan: left promiscuous mode [ 186.903167][ T29] audit: type=1400 audit(1725141664.468:248): avc: denied { create } for pid=5702 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 187.112269][ T5240] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 187.280291][ T29] audit: type=1400 audit(1725141664.828:249): avc: denied { mount } for pid=5707 comm="syz.2.82" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.409043][ T29] audit: type=1400 audit(1725141664.928:250): avc: denied { mount } for pid=5702 comm="syz.1.81" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 188.116610][ T29] audit: type=1400 audit(1725141665.678:251): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.938134][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 189.058879][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 190.099546][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 193.577130][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.586694][ T2637] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.790013][ T2637] usb 2-1: Using ep0 maxpacket: 16 [ 193.827709][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.114883][ T2637] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.136725][ T2637] usb 2-1: config 0 has no interfaces? [ 195.186756][ T29] audit: type=1400 audit(1725141671.798:252): avc: denied { mount } for pid=5734 comm="syz.0.89" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 195.327465][ T2637] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 195.347331][ T2637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.349957][ T29] audit: type=1400 audit(1725141671.838:253): avc: denied { mounton } for pid=5734 comm="syz.0.89" path="/24/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 195.376459][ T2637] usb 2-1: Product: syz [ 195.394734][ T2637] usb 2-1: Manufacturer: syz [ 195.407415][ T2637] usb 2-1: SerialNumber: syz [ 195.443795][ T2637] usb 2-1: config 0 descriptor?? [ 195.461949][ T29] audit: type=1400 audit(1725141671.878:254): avc: denied { mount } for pid=5734 comm="syz.0.89" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.422014][ T29] audit: type=1400 audit(1725141672.788:255): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 196.492082][ T5278] usb 2-1: USB disconnect, device number 2 [ 196.672878][ T5532] team0: Port device team_slave_0 added [ 196.926690][ T5532] team0: Port device team_slave_1 added [ 197.084027][ T5752] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 197.110072][ T29] audit: type=1400 audit(1725141674.668:256): avc: denied { relabelto } for pid=5747 comm="syz.0.91" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 197.126765][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.157081][ T5756] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 197.205977][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.231509][ T5566] bridge_slave_0: entered allmulticast mode [ 197.258967][ T29] audit: type=1400 audit(1725141674.708:257): avc: denied { associate } for pid=5747 comm="syz.0.91" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 197.285481][ T5566] bridge_slave_0: entered promiscuous mode [ 197.371677][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.398897][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.454204][ T5566] bridge_slave_1: entered allmulticast mode [ 197.454301][ T29] audit: type=1400 audit(1725141674.758:258): avc: denied { relabelto } for pid=5747 comm="syz.0.91" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_object_t:s0" [ 197.492798][ T5566] bridge_slave_1: entered promiscuous mode [ 197.566170][ T29] audit: type=1400 audit(1725141674.758:259): avc: denied { associate } for pid=5747 comm="syz.0.91" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0" [ 197.670240][ T29] audit: type=1400 audit(1725141674.848:260): avc: denied { read write } for pid=5750 comm="syz.1.93" name="virtual_nci" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.714353][ T29] audit: type=1400 audit(1725141674.848:261): avc: denied { open } for pid=5750 comm="syz.1.93" path="/dev/virtual_nci" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.867314][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.867343][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.867395][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.377570][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.395755][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.497900][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.534148][ T5566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.611958][ T5566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.047401][ T5532] hsr_slave_0: entered promiscuous mode [ 199.130612][ T5532] hsr_slave_1: entered promiscuous mode [ 199.206197][ T5532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.224774][ T5532] Cannot create hsr debugfs directory [ 199.363288][ T5566] team0: Port device team_slave_0 added [ 199.514520][ T5566] team0: Port device team_slave_1 added [ 199.987710][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.995085][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.601714][ T29] audit: type=1400 audit(1725141677.388:262): avc: denied { create } for pid=5774 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 200.707985][ T2973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.208330][ T2973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.743468][ T5566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.774194][ T5566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.847805][ T5566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.891744][ T5566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.898757][ T5566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.977566][ T5566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.095668][ T2973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.385929][ T29] audit: type=1400 audit(1725141679.948:263): avc: denied { read } for pid=5784 comm="syz.2.96" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.421612][ T2973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.490936][ T29] audit: type=1400 audit(1725141679.978:264): avc: denied { open } for pid=5784 comm="syz.2.96" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.514323][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.618898][ T29] audit: type=1400 audit(1725141680.008:265): avc: denied { ioctl } for pid=5784 comm="syz.2.96" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.698315][ T29] audit: type=1326 audit(1725141680.018:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.2.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb362779eb9 code=0x0 [ 202.750878][ T29] audit: type=1400 audit(1725141680.178:267): avc: denied { setopt } for pid=5784 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.001492][ T5566] hsr_slave_0: entered promiscuous mode [ 203.040830][ T5566] hsr_slave_1: entered promiscuous mode [ 203.090013][ T5566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.092187][ T5792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97'. [ 203.100197][ T5566] Cannot create hsr debugfs directory [ 203.144358][ T5792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97'. [ 204.039686][ T29] audit: type=1400 audit(1725141681.528:268): avc: denied { bind } for pid=5795 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.106259][ T29] audit: type=1400 audit(1725141681.538:269): avc: denied { write } for pid=5795 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.380236][ T29] audit: type=1400 audit(1725141682.868:270): avc: denied { execute } for pid=5809 comm="syz.2.99" path="/30/net_prio.prioidx" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.245539][ T29] audit: type=1400 audit(1725141683.808:271): avc: denied { ioctl } for pid=5811 comm="syz.0.100" path="socket:[8100]" dev="sockfs" ino=8100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.269874][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.320423][ T29] audit: type=1400 audit(1725141683.868:272): avc: denied { bind } for pid=5811 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.486923][ T2973] bridge_slave_1: left allmulticast mode [ 206.508204][ T2973] bridge_slave_1: left promiscuous mode [ 206.747946][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.798157][ T29] audit: type=1400 audit(1725141684.358:273): avc: denied { bind } for pid=5817 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.860670][ T2973] bridge_slave_0: left allmulticast mode [ 206.866349][ T2973] bridge_slave_0: left promiscuous mode [ 206.906020][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.916212][ T29] audit: type=1400 audit(1725141684.358:274): avc: denied { name_bind } for pid=5817 comm="syz.2.101" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 207.004098][ T29] audit: type=1400 audit(1725141684.358:275): avc: denied { node_bind } for pid=5817 comm="syz.2.101" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 207.070810][ T29] audit: type=1400 audit(1725141684.458:276): avc: denied { name_connect } for pid=5817 comm="syz.2.101" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 208.161425][ T29] audit: type=1400 audit(1725141685.728:277): avc: denied { bind } for pid=5828 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.252956][ T29] audit: type=1400 audit(1725141685.748:278): avc: denied { getopt } for pid=5828 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.377818][ T29] audit: type=1400 audit(1725141685.758:279): avc: denied { setattr } for pid=5823 comm="syz.0.102" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 208.498558][ T29] audit: type=1400 audit(1725141686.018:280): avc: denied { create } for pid=5828 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.935672][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.946614][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.971040][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.980880][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.989246][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.997751][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.810737][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.832805][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.857102][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.884811][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.896980][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.905687][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.115828][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.183255][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.221320][ T2973] bond0 (unregistering): Released all slaves [ 211.100391][ T5240] Bluetooth: hci3: command tx timeout [ 211.980376][ T5240] Bluetooth: hci4: command tx timeout [ 212.047952][ T2973] hsr_slave_0: left promiscuous mode [ 212.081250][ T2973] hsr_slave_1: left promiscuous mode [ 212.113511][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.134909][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.215707][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.255783][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.368355][ T2973] veth1_macvtap: left promiscuous mode [ 212.404940][ T2973] veth0_macvtap: left promiscuous mode [ 212.425926][ T2973] veth1_vlan: left promiscuous mode [ 212.437615][ T2973] veth0_vlan: left promiscuous mode [ 213.180156][ T5240] Bluetooth: hci3: command tx timeout [ 214.060988][ T5240] Bluetooth: hci4: command tx timeout [ 214.351928][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 214.475976][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 215.261017][ T5240] Bluetooth: hci3: command tx timeout [ 216.034382][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 216.034407][ T29] audit: type=1326 audit(1725141693.598:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362779eb9 code=0x7ffc0000 [ 216.137089][ T29] audit: type=1326 audit(1725141693.628:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362779eb9 code=0x7ffc0000 [ 216.175320][ T5240] Bluetooth: hci4: command tx timeout [ 216.230124][ T29] audit: type=1326 audit(1725141693.668:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb362779eb9 code=0x7ffc0000 [ 216.313968][ T29] audit: type=1326 audit(1725141693.668:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362779eb9 code=0x7ffc0000 [ 216.460003][ T29] audit: type=1326 audit(1725141693.678:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362779eb9 code=0x7ffc0000 [ 217.010353][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 217.183519][ T29] audit: type=1400 audit(1725141694.748:293): avc: denied { read } for pid=5875 comm="syz.0.113" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.257996][ T29] audit: type=1400 audit(1725141694.748:294): avc: denied { open } for pid=5875 comm="syz.0.113" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.343046][ T5240] Bluetooth: hci3: command tx timeout [ 217.379734][ T29] audit: type=1400 audit(1725141694.938:295): avc: denied { shutdown } for pid=5875 comm="syz.0.113" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.613065][ T29] audit: type=1400 audit(1725141695.158:296): avc: denied { create } for pid=5880 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.696531][ T29] audit: type=1400 audit(1725141695.168:297): avc: denied { connect } for pid=5880 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.949003][ T5566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.991914][ T5566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.221062][ T5240] Bluetooth: hci4: command tx timeout [ 218.279356][ T5566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.403244][ T5566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.953792][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 219.123502][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.151957][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.170100][ T5837] bridge_slave_0: entered allmulticast mode [ 219.196171][ T5837] bridge_slave_0: entered promiscuous mode [ 219.366794][ T2973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.475126][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.492811][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.507982][ T5837] bridge_slave_1: entered allmulticast mode [ 219.525242][ T5837] bridge_slave_1: entered promiscuous mode [ 219.683158][ T5908] netlink: 'syz.0.116': attribute type 5 has an invalid length. [ 219.740689][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 219.887962][ T5913] evm: overlay not supported [ 219.908535][ T2973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.123827][ T2973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.171692][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.209327][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.676010][ T2973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.803500][ T5837] team0: Port device team_slave_0 added [ 220.826308][ T5837] team0: Port device team_slave_1 added [ 221.194618][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 221.194643][ T29] audit: type=1400 audit(1725141698.758:302): avc: denied { append } for pid=5919 comm="syz.2.118" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 221.392906][ T5922] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 221.445232][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.461285][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.498351][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.515071][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.517229][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.538358][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.549600][ T5842] bridge_slave_0: entered allmulticast mode [ 221.556299][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.567275][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.595271][ T5842] bridge_slave_0: entered promiscuous mode [ 221.610874][ T5929] process 'syz.0.119' launched '/dev/fd/7' with NULL argv: empty string added [ 221.643002][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.682006][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.721195][ T29] audit: type=1400 audit(1725141699.258:303): avc: denied { execute_no_trans } for pid=5923 comm="syz.0.119" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.752027][ T5842] bridge_slave_1: entered allmulticast mode [ 221.782658][ T5842] bridge_slave_1: entered promiscuous mode [ 221.808223][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.823187][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.881307][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.898658][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.908084][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.944463][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.537963][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.644905][ T5837] hsr_slave_0: entered promiscuous mode [ 222.688792][ T29] audit: type=1400 audit(1725141700.248:304): avc: denied { write } for pid=5931 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 222.709427][ T5837] hsr_slave_1: entered promiscuous mode [ 222.775880][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.784129][ T29] audit: type=1400 audit(1725141700.278:305): avc: denied { read } for pid=5931 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 222.813853][ T5837] Cannot create hsr debugfs directory [ 223.006750][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.659982][ T5240] Bluetooth: hci1: command tx timeout [ 223.695791][ T5842] team0: Port device team_slave_0 added [ 223.920673][ T2973] bridge_slave_1: left allmulticast mode [ 223.926411][ T2973] bridge_slave_1: left promiscuous mode [ 223.957384][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.023666][ T2973] bridge_slave_0: left allmulticast mode [ 224.029390][ T2973] bridge_slave_0: left promiscuous mode [ 224.068693][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.147102][ T2973] bridge_slave_1: left allmulticast mode [ 224.186825][ T2973] bridge_slave_1: left promiscuous mode [ 224.201793][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.245751][ T2973] bridge_slave_0: left allmulticast mode [ 224.292014][ T2973] bridge_slave_0: left promiscuous mode [ 224.327541][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.328045][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.356349][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.370609][ T2973] bond0 (unregistering): Released all slaves [ 225.612620][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.626157][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.638292][ T2973] bond0 (unregistering): Released all slaves [ 225.675370][ T5842] team0: Port device team_slave_1 added [ 225.740004][ T5240] Bluetooth: hci1: command tx timeout [ 225.950320][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.957328][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.026959][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.090642][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.097764][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.154358][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.467927][ T5842] hsr_slave_0: entered promiscuous mode [ 227.510049][ T5842] hsr_slave_1: entered promiscuous mode [ 227.542533][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.579441][ T5842] Cannot create hsr debugfs directory [ 227.616994][ T2973] hsr_slave_0: left promiscuous mode [ 227.650534][ T2973] hsr_slave_1: left promiscuous mode [ 227.681142][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.703684][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.728631][ T2973] hsr_slave_0: left promiscuous mode [ 228.040082][ T5240] Bluetooth: hci1: command tx timeout [ 228.679886][ T2973] hsr_slave_1: left promiscuous mode [ 228.750250][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.772733][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.812285][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.819730][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.860247][ T5240] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 228.870489][ T5240] Bluetooth: hci0: Injecting HCI hardware error event [ 228.879213][ T5237] Bluetooth: hci0: hardware error 0x00 [ 228.932904][ T29] audit: type=1400 audit(1725141706.498:306): avc: denied { write } for pid=5986 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.009579][ T2973] veth1_macvtap: left promiscuous mode [ 229.015436][ T2973] veth0_macvtap: left promiscuous mode [ 229.027953][ T2973] veth1_vlan: left promiscuous mode [ 229.037728][ T2973] veth0_vlan: left promiscuous mode [ 230.060112][ T5240] Bluetooth: hci1: command tx timeout [ 230.145429][ T6000] ======================================================= [ 230.145429][ T6000] WARNING: The mand mount option has been deprecated and [ 230.145429][ T6000] and is ignored by this kernel. Remove the mand [ 230.145429][ T6000] option from the mount to silence this warning. [ 230.145429][ T6000] ======================================================= [ 230.332601][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 230.446705][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 230.948451][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 231.627872][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 231.687958][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 232.448053][ T6001] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 232.787571][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 234.259005][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 234.930425][ T29] audit: type=1400 audit(1725141712.498:307): avc: denied { listen } for pid=6018 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.953151][ T29] audit: type=1400 audit(1725141712.518:308): avc: denied { accept } for pid=6018 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.083328][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.090890][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.098591][ T5925] bridge_slave_0: entered allmulticast mode [ 235.113084][ T5925] bridge_slave_0: entered promiscuous mode [ 235.178682][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.196524][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.209754][ T5925] bridge_slave_1: entered allmulticast mode [ 235.240527][ T5925] bridge_slave_1: entered promiscuous mode [ 235.560501][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.571790][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.584142][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.600289][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.608803][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.616999][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.619565][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.781525][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.827159][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.872936][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.943648][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.963290][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.414838][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 236.642785][ T29] audit: type=1400 audit(1725141713.638:309): avc: denied { read } for pid=6035 comm="syz.2.135" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.830780][ T6042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.837316][ T6042] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 236.854771][ T6042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.862303][ T6042] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.871780][ T6042] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.879746][ T6042] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.885959][ T6042] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.893865][ T6042] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.965033][ T6042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.971974][ T6042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 236.980205][ T6042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 236.989386][ T6042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.998410][ T6042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 237.007354][ T6042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 237.032122][ T29] audit: type=1400 audit(1725141713.638:310): avc: denied { open } for pid=6035 comm="syz.2.135" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 237.474732][ T5925] team0: Port device team_slave_0 added [ 237.571703][ T5925] team0: Port device team_slave_1 added [ 238.780717][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 238.792853][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.817412][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.893581][ T2973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.011214][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.027375][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.054628][ T5237] Bluetooth: hci0: command 0x041b tx timeout [ 239.061973][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.068350][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.073855][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.091604][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.156106][ T2973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.199336][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.234062][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.245686][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.284259][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.335973][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.376789][ T2973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.518160][ T2973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.718292][ T5925] hsr_slave_0: entered promiscuous mode [ 239.728706][ T5925] hsr_slave_1: entered promiscuous mode [ 239.742704][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.752139][ T5925] Cannot create hsr debugfs directory [ 241.096398][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 241.110841][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.117333][ T5240] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.123744][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.130921][ T5237] Bluetooth: hci0: command 0x041b tx timeout [ 241.699231][ T6031] chnl_net:caif_netlink_parms(): no params data found [ 241.819994][ T29] audit: type=1400 audit(1725141719.378:311): avc: denied { create } for pid=6069 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 241.897639][ T29] audit: type=1400 audit(1725141719.468:312): avc: denied { ioctl } for pid=6069 comm="syz.2.139" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.097400][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.984778][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.181935][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.188041][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.195121][ T5230] Bluetooth: hci0: command 0x041b tx timeout [ 243.201624][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 243.242563][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.270430][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.288030][ T6031] bridge_slave_0: entered allmulticast mode [ 243.324635][ T6031] bridge_slave_0: entered promiscuous mode [ 243.334876][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.343126][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.351689][ T6031] bridge_slave_1: entered allmulticast mode [ 243.363953][ T6031] bridge_slave_1: entered promiscuous mode [ 243.390844][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.398121][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.041380][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.138828][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.570238][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.577533][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.615585][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.622932][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.685735][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.708538][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.761533][ T2637] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 244.798401][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.805759][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.986543][ T2637] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.000385][ T2637] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.011986][ T2637] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 245.036043][ T6031] team0: Port device team_slave_0 added [ 245.042348][ T2637] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 245.069900][ T2637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.093996][ T6108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.133039][ T2637] hub 3-1:1.0: bad descriptor, ignoring hub [ 245.139129][ T2637] hub 3-1:1.0: probe with driver hub failed with error -5 [ 245.180784][ T2637] cdc_wdm 3-1:1.0: skipping garbage [ 245.186080][ T2637] cdc_wdm 3-1:1.0: skipping garbage [ 245.197192][ T2973] bridge_slave_1: left allmulticast mode [ 245.210135][ T2637] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 245.214654][ T2973] bridge_slave_1: left promiscuous mode [ 245.230064][ T2637] cdc_wdm 3-1:1.0: Unknown control protocol [ 245.240314][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.255004][ T2973] bridge_slave_0: left allmulticast mode [ 245.265332][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 245.273021][ T2973] bridge_slave_0: left promiscuous mode [ 245.278954][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.315709][ T2973] bridge_slave_1: left allmulticast mode [ 245.324894][ T2973] bridge_slave_1: left promiscuous mode [ 245.331013][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.352600][ T2973] bridge_slave_0: left allmulticast mode [ 245.369572][ T2973] bridge_slave_0: left promiscuous mode [ 245.377842][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.989889][ T6108] usb 3-1: reset full-speed USB device number 2 using dummy_hcd [ 246.248010][ T6119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.316428][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.323253][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.329585][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.336228][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.339879][ T29] audit: type=1400 audit(1725141723.898:313): avc: denied { write } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.342667][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.370347][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.374722][ T29] audit: type=1400 audit(1725141723.898:314): avc: denied { remove_name } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.376695][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.405594][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.411966][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.413217][ T29] audit: type=1400 audit(1725141723.898:315): avc: denied { rename } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.418585][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.447268][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.453887][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.460477][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.467104][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.473625][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.480259][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.486654][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.493289][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.499665][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.506308][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.517184][ T29] audit: type=1400 audit(1725141723.898:316): avc: denied { add_name } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.548006][ T29] audit: type=1400 audit(1725141723.898:317): avc: denied { unlink } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.580609][ T29] audit: type=1400 audit(1725141723.898:318): avc: denied { create } for pid=4658 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.652184][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.664699][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.683953][ T2973] bond0 (unregistering): Released all slaves [ 246.707409][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.720755][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.742584][ T2973] bond0 (unregistering): Released all slaves [ 246.769620][ T6031] team0: Port device team_slave_1 added [ 246.813874][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.865106][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.128627][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.149153][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.176102][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.194257][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.209736][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.246532][ T5628] usb 3-1: USB disconnect, device number 2 [ 247.264056][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.340027][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 247.487490][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.761817][ T2973] hsr_slave_0: left promiscuous mode [ 247.769327][ T2973] hsr_slave_1: left promiscuous mode [ 247.787261][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.801651][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.831319][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.838809][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.888726][ T2973] hsr_slave_0: left promiscuous mode [ 247.903428][ T2973] hsr_slave_1: left promiscuous mode [ 247.952002][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.971315][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.048587][ T2973] veth1_macvtap: left promiscuous mode [ 248.069128][ T2973] veth0_macvtap: left promiscuous mode [ 248.089011][ T2973] veth1_vlan: left promiscuous mode [ 248.098480][ T2973] veth0_vlan: left promiscuous mode [ 249.316969][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 249.385657][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 249.420599][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 250.338157][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 250.396735][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 250.735791][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.784167][ T6031] hsr_slave_0: entered promiscuous mode [ 250.804125][ T6031] hsr_slave_1: entered promiscuous mode [ 250.898917][ T6141] tipc: Enabling of bearer rejected, failed to enable media [ 251.376527][ T29] audit: type=1400 audit(1725141728.938:319): avc: denied { connect } for pid=6158 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.409318][ T29] audit: type=1400 audit(1725141728.938:320): avc: denied { ioctl } for pid=6158 comm="syz.2.143" path="socket:[11477]" dev="sockfs" ino=11477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.614753][ T5925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.642410][ T5925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.898071][ T5925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.940998][ T5925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.001541][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.069202][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 252.603884][ T5842] veth0_vlan: entered promiscuous mode [ 253.104808][ T5842] veth1_vlan: entered promiscuous mode [ 253.188385][ T5837] veth0_vlan: entered promiscuous mode [ 253.287228][ T5837] veth1_vlan: entered promiscuous mode [ 253.729720][ T5837] veth0_macvtap: entered promiscuous mode [ 253.791482][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.852250][ T6031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.895976][ T5837] veth1_macvtap: entered promiscuous mode [ 253.910271][ T29] audit: type=1400 audit(1725141731.468:321): avc: denied { mount } for pid=6186 comm="syz.2.146" name="/" dev="gadgetfs" ino=10867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 253.949419][ T5842] veth0_macvtap: entered promiscuous mode [ 253.973506][ T6031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.005976][ T6031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.048631][ T6031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.117501][ T5842] veth1_macvtap: entered promiscuous mode [ 254.186252][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.253836][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.261062][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.408203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.415634][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.496647][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.508175][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.552001][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.591053][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.603014][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.648478][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.666624][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.709180][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.839295][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.856918][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.911257][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.934431][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.947297][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.957506][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.968474][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.999379][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.108596][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.126673][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.136666][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.166658][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.393805][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.403804][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.417699][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.434107][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.635875][ T29] audit: type=1400 audit(1725141733.148:322): avc: denied { read } for pid=6202 comm="syz.2.147" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 255.750130][ T29] audit: type=1400 audit(1725141733.158:323): avc: denied { open } for pid=6202 comm="syz.2.147" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 255.875389][ T29] audit: type=1400 audit(1725141733.428:324): avc: denied { write } for pid=6202 comm="syz.2.147" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 256.147357][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.199379][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.314060][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.483348][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.518900][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.658710][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.678704][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.693212][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.989150][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.028037][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.089044][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.096414][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.703194][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.710595][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.863373][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.023230][ T29] audit: type=1400 audit(1725141735.588:325): avc: denied { mount } for pid=6226 comm="syz.1.103" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.524659][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032044400: rx timeout, send abort [ 259.683352][ T6240] VFS: could not find a valid V7 on nullb0. [ 259.698430][ T5925] veth0_vlan: entered promiscuous mode [ 259.714306][ T29] audit: type=1400 audit(1725141737.278:326): avc: denied { ioctl } for pid=6233 comm="syz.4.43" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.738715][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.889151][ T5925] veth1_vlan: entered promiscuous mode [ 259.900763][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.034235][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032044400: abort rx timeout. Force session deactivation [ 261.661345][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.667805][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.046413][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.071182][ T5925] veth0_macvtap: entered promiscuous mode [ 262.231836][ T5925] veth1_macvtap: entered promiscuous mode [ 263.220363][ T29] audit: type=1400 audit(1725141739.978:327): avc: denied { ioctl } for pid=6254 comm="syz.2.152" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.464204][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.499934][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.504620][ T29] audit: type=1400 audit(1725141741.068:328): avc: denied { setopt } for pid=6260 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.520021][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.545497][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 263.562798][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.566398][ T29] audit: type=1400 audit(1725141741.108:329): avc: denied { nlmsg_read } for pid=6260 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.593343][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.593375][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.597483][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.688348][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.729913][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.740494][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.752274][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.769062][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.780138][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.812876][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.924859][ T5925] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.957573][ T5925] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.976219][ T5925] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.989630][ T5925] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.029616][ T6031] veth0_vlan: entered promiscuous mode [ 264.165303][ T6031] veth1_vlan: entered promiscuous mode [ 265.045653][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.060470][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.443039][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.466037][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.545593][ T6031] veth0_macvtap: entered promiscuous mode [ 265.662850][ T6031] veth1_macvtap: entered promiscuous mode [ 266.034408][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.137479][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.171577][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.182983][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.207831][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.535291][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.547108][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.558971][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.584167][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.606924][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.659484][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.678002][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.711019][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.779521][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.804937][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.829475][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.856166][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.875663][ T29] audit: type=1400 audit(1725141745.438:330): avc: denied { write } for pid=6282 comm="syz.3.158" path="socket:[13388]" dev="sockfs" ino=13388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 267.927993][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.985354][ T29] audit: type=1400 audit(1725141745.438:331): avc: denied { nlmsg_read } for pid=6282 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 269.871478][ T6031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.922354][ T6031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.974547][ T6031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.998814][ T6031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.140085][ T5347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 270.322753][ T29] audit: type=1400 audit(1725141747.858:332): avc: denied { set_context_mgr } for pid=6291 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 270.330726][ T6295] vivid-000: disconnect [ 270.390505][ T5347] usb 4-1: Using ep0 maxpacket: 32 [ 270.448774][ T5347] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 270.467493][ T6299] vivid-000: reconnect [ 270.482687][ T5347] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.525284][ T5347] usb 4-1: config 1 interface 0 has no altsetting 0 [ 270.556784][ T5347] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 270.580078][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.600232][ T5347] usb 4-1: Product: syz [ 272.658419][ T5347] usb 4-1: Manufacturer: syz [ 272.670326][ T5347] usb 4-1: SerialNumber: syz [ 272.904535][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.916972][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.159120][ T5347] usb 4-1: can't set config #1, error -71 [ 273.225227][ T5347] usb 4-1: USB disconnect, device number 2 [ 273.401806][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.451662][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.559873][ T29] audit: type=1400 audit(1725141752.118:333): avc: denied { create } for pid=6312 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 275.761662][ T29] audit: type=1400 audit(1725141752.228:334): avc: denied { connect } for pid=6312 comm="syz.1.165" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.250955][ T29] audit: type=1400 audit(1725141754.068:335): avc: denied { getopt } for pid=6323 comm="syz.3.166" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.956060][ T5240] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 279.791103][ T29] audit: type=1400 audit(1725141757.358:336): avc: denied { create } for pid=6329 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 279.946966][ T29] audit: type=1400 audit(1725141757.468:337): avc: denied { write } for pid=6329 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 280.288226][ T6349] ptrace attach of "./syz-executor exec"[6031] was attempted by "./syz-executor exec"[6349] [ 281.239517][ T6357] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 281.269913][ T6357] CIFS: Unable to determine destination address [ 289.341482][ T29] audit: type=1400 audit(1725141758.848:338): avc: denied { mounton } for pid=6355 comm="syz.1.172" path="/proc/35/task" dev="proc" ino=13688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 292.901453][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.939432][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.951002][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.995578][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.006204][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.018421][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.163207][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.180398][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.233892][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.259153][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.272367][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.290620][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.489536][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.500413][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.508150][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.527516][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.549105][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.563832][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.597103][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.606530][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.615850][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.625617][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.639380][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.649666][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.658365][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.668737][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.678226][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.687914][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.691412][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.704548][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.839131][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.033027][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.171659][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.260855][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.101047][ T5241] Bluetooth: hci0: command tx timeout [ 295.153773][ T52] bridge_slave_1: left allmulticast mode [ 295.159556][ T52] bridge_slave_1: left promiscuous mode [ 295.165848][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.177974][ T52] bridge_slave_0: left allmulticast mode [ 295.184708][ T52] bridge_slave_0: left promiscuous mode [ 295.190714][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.340549][ T5241] Bluetooth: hci2: command tx timeout [ 295.580108][ T5241] Bluetooth: hci1: command tx timeout [ 295.745028][ T5241] Bluetooth: hci4: command tx timeout [ 295.824879][ T5241] Bluetooth: hci3: command tx timeout [ 295.854143][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.867246][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.883703][ T52] bond0 (unregistering): Released all slaves [ 296.239335][ T6366] chnl_net:caif_netlink_parms(): no params data found [ 296.378847][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 296.470102][ T6371] chnl_net:caif_netlink_parms(): no params data found [ 297.144193][ T52] hsr_slave_0: left promiscuous mode [ 297.156927][ T52] hsr_slave_1: left promiscuous mode [ 297.163468][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.174684][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.182546][ T5241] Bluetooth: hci0: command tx timeout [ 297.190069][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.197756][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.231711][ T52] veth1_macvtap: left promiscuous mode [ 297.237306][ T52] veth0_macvtap: left promiscuous mode [ 297.245700][ T52] veth1_vlan: left promiscuous mode [ 297.251947][ T52] veth0_vlan: left promiscuous mode [ 297.420140][ T5241] Bluetooth: hci2: command tx timeout [ 297.660013][ T5241] Bluetooth: hci1: command tx timeout [ 297.823129][ T5241] Bluetooth: hci4: command tx timeout [ 297.903977][ T5241] Bluetooth: hci3: command tx timeout [ 298.154105][ T52] team0 (unregistering): Port device team_slave_1 removed [ 298.227538][ T52] team0 (unregistering): Port device team_slave_0 removed [ 299.075182][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 299.099113][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 299.197914][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.205408][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.213442][ T6373] bridge_slave_0: entered allmulticast mode [ 299.224460][ T6373] bridge_slave_0: entered promiscuous mode [ 299.269921][ T5241] Bluetooth: hci0: command tx timeout [ 299.290148][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.297391][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.305445][ T6366] bridge_slave_0: entered allmulticast mode [ 299.314206][ T6366] bridge_slave_0: entered promiscuous mode [ 299.330207][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.337455][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.345233][ T6366] bridge_slave_1: entered allmulticast mode [ 299.355551][ T6366] bridge_slave_1: entered promiscuous mode [ 299.388391][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.400054][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.407519][ T6373] bridge_slave_1: entered allmulticast mode [ 299.417910][ T6373] bridge_slave_1: entered promiscuous mode [ 299.500821][ T5241] Bluetooth: hci2: command tx timeout [ 299.565518][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.572963][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.582166][ T6371] bridge_slave_0: entered allmulticast mode [ 299.591370][ T6371] bridge_slave_0: entered promiscuous mode [ 299.726643][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.738884][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.740204][ T5241] Bluetooth: hci1: command tx timeout [ 299.748960][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.759512][ T6371] bridge_slave_1: entered allmulticast mode [ 299.769298][ T6371] bridge_slave_1: entered promiscuous mode [ 299.805152][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.868933][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.911828][ T5241] Bluetooth: hci4: command tx timeout [ 299.980049][ T5241] Bluetooth: hci3: command tx timeout [ 300.019309][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.184830][ T6366] team0: Port device team_slave_0 added [ 300.206434][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.239212][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.514633][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.530332][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.537748][ T6374] bridge_slave_0: entered allmulticast mode [ 300.562658][ T6374] bridge_slave_0: entered promiscuous mode [ 300.636077][ T6366] team0: Port device team_slave_1 added [ 300.735623][ T6373] team0: Port device team_slave_0 added [ 300.743290][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.752940][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.762644][ T6364] bridge_slave_0: entered allmulticast mode [ 300.771139][ T6364] bridge_slave_0: entered promiscuous mode [ 300.781309][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.788662][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.796516][ T6374] bridge_slave_1: entered allmulticast mode [ 300.805431][ T6374] bridge_slave_1: entered promiscuous mode [ 300.895413][ T6371] team0: Port device team_slave_0 added [ 300.911755][ T6373] team0: Port device team_slave_1 added [ 300.918279][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.926643][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.934465][ T6364] bridge_slave_1: entered allmulticast mode [ 300.957537][ T6364] bridge_slave_1: entered promiscuous mode [ 301.083225][ T6371] team0: Port device team_slave_1 added [ 301.172579][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.197304][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.209269][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.216433][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.243396][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.287189][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.294585][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.321173][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.336947][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.344348][ T5241] Bluetooth: hci0: command tx timeout [ 301.351404][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.385472][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.412189][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.428442][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.461376][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.468399][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.503549][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.580191][ T5241] Bluetooth: hci2: command tx timeout [ 301.645857][ T6374] team0: Port device team_slave_0 added [ 301.685571][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.692742][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.725515][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.742565][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.749657][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.775734][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.820799][ T5241] Bluetooth: hci1: command tx timeout [ 301.863178][ T6373] hsr_slave_0: entered promiscuous mode [ 301.871768][ T6373] hsr_slave_1: entered promiscuous mode [ 301.878786][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.891373][ T6373] Cannot create hsr debugfs directory [ 301.907721][ T6364] team0: Port device team_slave_0 added [ 301.918644][ T6374] team0: Port device team_slave_1 added [ 301.980390][ T5241] Bluetooth: hci4: command tx timeout [ 302.015719][ T6364] team0: Port device team_slave_1 added [ 302.059986][ T5241] Bluetooth: hci3: command tx timeout [ 302.081006][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.089984][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.116317][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.186643][ T6366] hsr_slave_0: entered promiscuous mode [ 302.195844][ T6366] hsr_slave_1: entered promiscuous mode [ 302.202811][ T6366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.211537][ T6366] Cannot create hsr debugfs directory [ 302.288280][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.299700][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.326912][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.435227][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.483197][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.499235][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.528205][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.701215][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.739484][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.747116][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.787301][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.897374][ T6371] hsr_slave_0: entered promiscuous mode [ 302.919309][ T6371] hsr_slave_1: entered promiscuous mode [ 302.933887][ T6371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.947895][ T6371] Cannot create hsr debugfs directory [ 303.117577][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.224185][ T6374] hsr_slave_0: entered promiscuous mode [ 303.256261][ T6374] hsr_slave_1: entered promiscuous mode [ 303.271767][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.279403][ T6374] Cannot create hsr debugfs directory [ 303.443658][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.649240][ T6364] hsr_slave_0: entered promiscuous mode [ 303.659068][ T6364] hsr_slave_1: entered promiscuous mode [ 303.667090][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.675270][ T6364] Cannot create hsr debugfs directory [ 304.224682][ T6373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.462291][ T6373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.635205][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.894372][ T6373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.034764][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.196711][ T6373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.276253][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.400666][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.157392][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.366522][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.503676][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.680546][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.082684][ T52] bridge_slave_1: left allmulticast mode [ 307.088473][ T52] bridge_slave_1: left promiscuous mode [ 307.101225][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.121487][ T52] bridge_slave_0: left allmulticast mode [ 307.127166][ T52] bridge_slave_0: left promiscuous mode [ 307.133728][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.146969][ T52] bridge_slave_1: left allmulticast mode [ 307.153026][ T52] bridge_slave_1: left promiscuous mode [ 307.158998][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.171020][ T52] bridge_slave_0: left allmulticast mode [ 307.176723][ T52] bridge_slave_0: left promiscuous mode [ 307.187063][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.199393][ T52] bridge_slave_1: left allmulticast mode [ 307.208465][ T52] bridge_slave_1: left promiscuous mode [ 307.214602][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.226077][ T52] bridge_slave_0: left allmulticast mode [ 307.234892][ T52] bridge_slave_0: left promiscuous mode [ 307.242842][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.256568][ T52] bridge_slave_1: left allmulticast mode [ 307.262500][ T52] bridge_slave_1: left promiscuous mode [ 307.268504][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.280523][ T52] bridge_slave_0: left allmulticast mode [ 307.286311][ T52] bridge_slave_0: left promiscuous mode [ 307.294893][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.162994][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.177157][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.193005][ T52] bond0 (unregistering): Released all slaves [ 309.402193][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.426084][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.440936][ T52] bond0 (unregistering): Released all slaves [ 309.630199][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.645064][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.658067][ T52] bond0 (unregistering): Released all slaves [ 309.864932][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.882540][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.896455][ T52] bond0 (unregistering): Released all slaves [ 311.583217][ T6373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.599274][ T6373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.650245][ T6373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.679296][ T6373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.020377][ T6366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.037048][ T6366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.063296][ T6366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.084649][ T6366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.120229][ T52] hsr_slave_0: left promiscuous mode [ 312.126848][ T52] hsr_slave_1: left promiscuous mode [ 312.135988][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.143760][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.153127][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.162244][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.177184][ T52] hsr_slave_0: left promiscuous mode [ 312.183625][ T52] hsr_slave_1: left promiscuous mode [ 312.200090][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.207565][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.216460][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.225750][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.242785][ T52] hsr_slave_0: left promiscuous mode [ 312.249423][ T52] hsr_slave_1: left promiscuous mode [ 312.258113][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.266091][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.277979][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.285584][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.304687][ T52] hsr_slave_0: left promiscuous mode [ 312.313781][ T52] hsr_slave_1: left promiscuous mode [ 312.321028][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.328588][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.340580][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.348158][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.445775][ T52] veth1_macvtap: left promiscuous mode [ 312.452684][ T52] veth0_macvtap: left promiscuous mode [ 312.458420][ T52] veth1_vlan: left promiscuous mode [ 312.464692][ T52] veth0_vlan: left promiscuous mode [ 312.472569][ T52] veth1_macvtap: left promiscuous mode [ 312.478191][ T52] veth0_macvtap: left promiscuous mode [ 312.484127][ T52] veth1_vlan: left promiscuous mode [ 312.489561][ T52] veth0_vlan: left promiscuous mode [ 312.498333][ T52] veth1_macvtap: left promiscuous mode [ 312.504091][ T52] veth0_macvtap: left promiscuous mode [ 312.510355][ T52] veth1_vlan: left promiscuous mode [ 312.515836][ T52] veth0_vlan: left promiscuous mode [ 312.523120][ T52] veth1_macvtap: left promiscuous mode [ 312.528697][ T52] veth0_macvtap: left promiscuous mode [ 312.534977][ T52] veth1_vlan: left promiscuous mode [ 312.540500][ T52] veth0_vlan: left promiscuous mode [ 313.926132][ T52] team0 (unregistering): Port device team_slave_1 removed [ 313.999636][ T52] team0 (unregistering): Port device team_slave_0 removed [ 315.418707][ T52] team0 (unregistering): Port device team_slave_1 removed [ 315.485528][ T52] team0 (unregistering): Port device team_slave_0 removed [ 316.844476][ T52] team0 (unregistering): Port device team_slave_1 removed [ 316.924702][ T52] team0 (unregistering): Port device team_slave_0 removed [ 318.278214][ T52] team0 (unregistering): Port device team_slave_1 removed [ 318.352772][ T52] team0 (unregistering): Port device team_slave_0 removed [ 319.427271][ T6374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.479513][ T6374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.534081][ T6374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.589872][ T6374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.986738][ T6371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.042955][ T6371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.067828][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.115769][ T6371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.171767][ T6371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.436216][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.500857][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.673152][ T6364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.735673][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.743311][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.812342][ T6364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.838068][ T6364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.910844][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.918256][ T6364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.060809][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.068201][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.176842][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.184176][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.267351][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.274670][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.389641][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.585792][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.757787][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.765121][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.901592][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.908846][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.069603][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.297362][ T6374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.330293][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.367078][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.484538][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.491920][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.537990][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.545303][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.872165][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.878571][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.932014][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.997302][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.134372][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.365000][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.459599][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.467033][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.545284][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.552794][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.615951][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.853132][ T6366] veth0_vlan: entered promiscuous mode [ 323.957327][ T6366] veth1_vlan: entered promiscuous mode [ 324.026360][ T6364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.087703][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.103915][ T6373] veth0_vlan: entered promiscuous mode [ 324.159712][ T6366] veth0_macvtap: entered promiscuous mode [ 324.193906][ T6374] veth0_vlan: entered promiscuous mode [ 324.218244][ T6366] veth1_macvtap: entered promiscuous mode [ 324.246927][ T6373] veth1_vlan: entered promiscuous mode [ 324.383872][ T6374] veth1_vlan: entered promiscuous mode [ 324.442297][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.564617][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.644536][ T6366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.660697][ T6366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.669674][ T6366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.687764][ T6366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.741516][ T6371] veth0_vlan: entered promiscuous mode [ 324.776131][ T6373] veth0_macvtap: entered promiscuous mode [ 324.818081][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.833337][ T6373] veth1_macvtap: entered promiscuous mode [ 324.891319][ T6374] veth0_macvtap: entered promiscuous mode [ 324.934740][ T6371] veth1_vlan: entered promiscuous mode [ 324.967324][ T6374] veth1_macvtap: entered promiscuous mode [ 325.046099][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.062424][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.079159][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.104675][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.131541][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.148402][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.161578][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.176583][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.256584][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.294178][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.322259][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.358137][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.383372][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.409278][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.423339][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.436673][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.533462][ T6373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.546475][ T6373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.557197][ T6373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.566336][ T6373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.618849][ T6374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.636364][ T6374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.647851][ T6374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.667469][ T6374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.759629][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.788981][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.898506][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.935499][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.951897][ T6371] veth0_macvtap: entered promiscuous mode [ 326.034219][ T6371] veth1_macvtap: entered promiscuous mode [ 326.129471][ T6364] veth0_vlan: entered promiscuous mode [ 326.369892][ T29] audit: type=1400 audit(1725141803.928:339): avc: denied { shutdown } for pid=6589 comm="syz.2.174" lport=52963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.514098][ T6364] veth1_vlan: entered promiscuous mode [ 326.537762][ T29] audit: type=1400 audit(1725141803.998:340): avc: denied { read } for pid=6589 comm="syz.2.174" path="socket:[16477]" dev="sockfs" ino=16477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.130938][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.138838][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.176398][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.192299][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.213242][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.224337][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.240879][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.262345][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.279345][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.339406][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.389788][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.399680][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.417772][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.428350][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.446330][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.459657][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.698383][ T6371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.707810][ T6371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.719537][ T6371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.729184][ T6371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.755323][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.767238][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.803893][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.819284][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.960868][ T6364] veth0_macvtap: entered promiscuous mode [ 328.184849][ T6364] veth1_macvtap: entered promiscuous mode [ 328.419535][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.544521][ T6610] NILFS (nullb0): couldn't find nilfs on the device [ 329.169846][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.228215][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.259528][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.288712][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.300141][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.312407][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.326025][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.336292][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.361312][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.388625][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.601751][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.705356][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.749942][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.769976][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.794954][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.826010][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.847024][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.860813][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.898680][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.912732][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.926310][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.952382][ T2637] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 330.058184][ T6364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.119818][ T6364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.163940][ T6364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.190472][ T2637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.222650][ T6364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.232163][ T2637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.271873][ T2637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 330.325952][ T2637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.388035][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.401322][ T2637] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 330.435747][ T2637] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 330.465074][ T2637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.472028][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.515228][ T2637] usb 5-1: config 0 descriptor?? [ 331.133894][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.230135][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.288977][ T2637] ntrig 0003:1B96:000A.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 332.606402][ T2637] ntrig 0003:1B96:000A.0001: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 332.663084][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.985743][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.022285][ T2637] usb 5-1: USB disconnect, device number 3 [ 334.602625][ T6646] loop7: detected capacity change from 0 to 16384 [ 334.809688][ T6651] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 336.909027][ T6673] UBIFS error (pid: 6673): cannot open "", error -22 [ 340.071834][ T6658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.686019][ T6658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.849425][ T29] audit: type=1400 audit(1725141818.408:341): avc: denied { read } for pid=6684 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 341.046030][ T29] audit: type=1400 audit(1725141818.538:342): avc: denied { execute } for pid=6689 comm="syz.2.189" path=2F6D656D66643A25202864656C6574656429 dev="hugetlbfs" ino=17207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 341.912553][ T5278] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 348.869903][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 348.885683][ T6658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.941558][ T5278] usb 4-1: device descriptor read/all, error -71 [ 349.853522][ T6658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.263690][ T29] audit: type=1400 audit(1725141827.778:343): avc: denied { create } for pid=6712 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.210013][ T29] audit: type=1400 audit(1725141827.788:344): avc: denied { getopt } for pid=6712 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.329976][ T29] audit: type=1400 audit(1725141828.858:345): avc: denied { read } for pid=6705 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 351.475614][ T5280] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 351.634903][ T6658] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.751684][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 351.768285][ T6658] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.781190][ T5280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.849867][ T5280] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.919568][ T5280] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 351.959599][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.153543][ T6658] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.180055][ T5280] usb 3-1: Product: syz [ 352.184454][ T5280] usb 3-1: Manufacturer: syz [ 353.559671][ T29] audit: type=1400 audit(1725141829.788:346): avc: denied { setopt } for pid=6720 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.578429][ T6723] syz.3.196: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 353.604077][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.3.196 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 353.617115][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 353.627413][ T6723] Call Trace: [ 353.631022][ T6723] [ 353.634124][ T6723] dump_stack_lvl+0x16c/0x1f0 [ 353.638908][ T6723] warn_alloc+0x24d/0x3a0 [ 353.643317][ T6723] ? __pfx_warn_alloc+0x10/0x10 [ 353.648282][ T6723] ? __get_vm_area_node+0x190/0x2d0 [ 353.654802][ T6723] ? __get_vm_area_node+0x1bc/0x2d0 [ 353.660179][ T6723] __vmalloc_node_range_noprof+0xfe8/0x14e0 [ 353.666230][ T6723] ? xt_alloc_entry_offsets+0x3a/0x60 [ 353.671650][ T6723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 353.678010][ T6723] ? trace_kmalloc+0x2d/0xe0 [ 353.682644][ T6723] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 353.688411][ T6723] ? xt_alloc_entry_offsets+0x3a/0x60 [ 353.693925][ T6723] __kvmalloc_node_noprof+0x14f/0x1a0 [ 353.699575][ T6723] ? xt_alloc_entry_offsets+0x3a/0x60 [ 353.705037][ T6723] xt_alloc_entry_offsets+0x3a/0x60 [ 353.710449][ T6723] translate_table+0x22e/0x1710 [ 353.715386][ T6723] ? __pfx_lock_release+0x10/0x10 [ 353.720517][ T6723] ? __pfx___might_resched+0x10/0x10 [ 353.725889][ T6723] ? __pfx_translate_table+0x10/0x10 [ 353.731236][ T6723] do_ipt_set_ctl+0x605/0xc30 [ 353.735973][ T6723] ? trace_contention_end+0xea/0x140 [ 353.741418][ T6723] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 353.746713][ T6723] ? __pfx___mutex_lock+0x10/0x10 [ 353.751789][ T6723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 353.757835][ T6723] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 353.763877][ T6723] nf_setsockopt+0x8a/0xf0 [ 353.768498][ T6723] ip_setsockopt+0xcb/0xf0 [ 353.773003][ T6723] tcp_setsockopt+0xa4/0x100 [ 353.777666][ T6723] smc_setsockopt+0x1b4/0xa00 [ 353.782515][ T6723] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 353.788727][ T6723] ? __pfx_smc_setsockopt+0x10/0x10 [ 353.794028][ T6723] ? selinux_socket_setsockopt+0x6a/0x80 [ 353.799717][ T6723] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 353.805334][ T6723] ? __pfx_smc_setsockopt+0x10/0x10 [ 353.810697][ T6723] do_sock_setsockopt+0x222/0x480 [ 353.815790][ T6723] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 353.821430][ T6723] ? __fget_light+0x173/0x210 [ 353.826191][ T6723] __sys_setsockopt+0x1a4/0x270 [ 353.831307][ T6723] ? __pfx___sys_setsockopt+0x10/0x10 [ 353.836756][ T6723] ? xfd_validate_state+0x5d/0x180 [ 353.841921][ T6723] __x64_sys_setsockopt+0xbd/0x160 [ 353.847090][ T6723] ? do_syscall_64+0x91/0x250 [ 353.851801][ T6723] ? lockdep_hardirqs_on+0x7c/0x110 [ 353.857039][ T6723] do_syscall_64+0xcd/0x250 [ 353.861682][ T6723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.867621][ T6723] RIP: 0033:0x7f2373b79eb9 [ 353.872182][ T6723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.891903][ T6723] RSP: 002b:00007f23748f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.900384][ T6723] RAX: ffffffffffffffda RBX: 00007f2373d16130 RCX: 00007f2373b79eb9 [ 353.908490][ T6723] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 353.916496][ T6723] RBP: 00007f2373be793e R08: 00000000000002a0 R09: 0000000000000000 [ 353.924573][ T6723] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000000 [ 353.932681][ T6723] R13: 0000000000000000 R14: 00007f2373d16130 R15: 00007ffca49a8558 [ 353.940698][ T6723] [ 353.944586][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.955179][ T6723] Mem-Info: [ 353.960525][ T6723] active_anon:9789 inactive_anon:0 isolated_anon:0 [ 353.960525][ T6723] active_file:11472 inactive_file:38514 isolated_file:0 [ 353.960525][ T6723] unevictable:768 dirty:542 writeback:0 [ 353.960525][ T6723] slab_reclaimable:10011 slab_unreclaimable:99052 [ 353.960525][ T6723] mapped:25380 shmem:4341 pagetables:718 [ 353.960525][ T6723] sec_pagetables:0 bounce:0 [ 353.960525][ T6723] kernel_misc_reclaimable:0 [ 353.960525][ T6723] free:1316055 free_pcp:3194 free_cma:0 [ 354.006447][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.015729][ T6723] Node 0 active_anon:39156kB inactive_anon:0kB active_file:45888kB inactive_file:153988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101520kB dirty:2168kB writeback:0kB shmem:15828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10236kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 354.048423][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.054760][ T6723] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 354.085975][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.092187][ T6723] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.120761][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.128571][ T6723] lowmem_reserve[]: 0 2467 2468 0 0 [ 354.135201][ T6723] Node 0 DMA32 free:1305456kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:39136kB inactive_anon:0kB active_file:45888kB inactive_file:153180kB unevictable:1536kB writepending:2168kB present:3129332kB managed:2553820kB mlocked:0kB bounce:0kB free_pcp:8628kB local_pcp:5580kB free_cma:0kB [ 354.167216][ T6723] lowmem_reserve[]: 0 0 0 0 0 [ 354.172163][ T6723] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 354.199906][ T6723] lowmem_reserve[]: 0 0 0 0 0 [ 354.204762][ T6723] Node 1 Normal free:3943396kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4004kB local_pcp:0kB free_cma:0kB [ 354.233870][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.245230][ T6723] lowmem_reserve[]: 0 0 0 0 0 [ 354.250204][ T6723] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 354.263167][ T6723] Node 0 DMA32: 2*4kB (UE) 6*8kB (E) 76*16kB (UME) 24*32kB (ME) 243*64kB (ME) 38*128kB (UME) 22*256kB (M) 15*512kB (UME) 8*1024kB (ME) 2*2048kB (ME) 307*4096kB (M) = 1305528kB [ 354.281089][ T6723] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 354.293548][ T6723] Node 1 Normal: 2*4kB (U) 0*8kB 1*16kB (U) 2*32kB (U) 3*64kB (UM) 2*128kB (U) 2*256kB (UM) 2*512kB (UM) 1*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3943448kB [ 354.312922][ T6723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.324394][ T6723] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.333846][ T6723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.343618][ T6723] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.353181][ T6723] 54327 total pagecache pages [ 354.357975][ T6723] 0 pages in swap cache [ 354.362387][ T6723] Free swap = 124448kB [ 354.366795][ T6723] Total swap = 124996kB [ 354.371182][ T6723] 2097051 pages RAM [ 354.375190][ T6723] 0 pages HighMem/MovableOnly [ 354.380379][ T6723] 427258 pages reserved [ 354.384992][ T6723] 0 pages cma reserved [ 355.134233][ T5280] usb 3-1: SerialNumber: syz [ 355.451309][ T5280] usb 3-1: config 0 descriptor?? [ 355.494665][ T6658] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.513011][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.527044][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.534461][ T5280] usb 3-1: can't set config #0, error -71 [ 355.536955][ T29] audit: type=1400 audit(1725141830.248:347): avc: denied { bind } for pid=6720 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 355.587178][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.680193][ T5280] usb 3-1: USB disconnect, device number 3 [ 355.712211][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.723511][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 355.755284][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.769462][ T29] audit: type=1400 audit(1725141830.248:348): avc: denied { name_bind } for pid=6720 comm="syz.3.196" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 356.033194][ T6736] cannot load conntrack support for proto=3 [ 356.345729][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.736443][ T29] audit: type=1400 audit(1725141830.248:349): avc: denied { node_bind } for pid=6720 comm="syz.3.196" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 356.858349][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.867986][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.881369][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.894156][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 356.902106][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.997415][ T29] audit: type=1400 audit(1725141833.638:350): avc: denied { ioctl } for pid=6732 comm="syz.2.198" path="socket:[17391]" dev="sockfs" ino=17391 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 357.470573][ T5280] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 357.971344][ T5240] Bluetooth: hci5: command tx timeout [ 357.980133][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 358.218733][ T29] audit: type=1400 audit(1725141835.088:351): avc: denied { bind } for pid=6738 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.220753][ T5280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 358.439925][ T5280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 358.494045][ T5280] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.631491][ T5280] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 358.681580][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 358.739900][ T5280] usb 4-1: Product: syz [ 358.758548][ T5280] usb 4-1: Manufacturer: syz [ 358.788652][ T5280] usb 4-1: SerialNumber: syz [ 359.181508][ T5240] Bluetooth: hci6: command tx timeout [ 359.811070][ T5280] usb 4-1: can't set config #1, error -71 [ 359.892010][ T5280] usb 4-1: USB disconnect, device number 5 [ 360.016969][ T6755] SELinux: security_context_str_to_sid () failed with errno=-22 [ 360.083998][ T5240] Bluetooth: hci5: command tx timeout [ 360.187510][ T6750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.201'. [ 360.407360][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.781503][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.262635][ T5240] Bluetooth: hci6: command tx timeout [ 362.557540][ T5240] Bluetooth: hci5: command tx timeout [ 362.666188][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.429874][ T5240] Bluetooth: hci6: command tx timeout [ 364.622273][ T5241] Bluetooth: hci5: command tx timeout [ 364.787532][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.601149][ T29] audit: type=1400 audit(1725141843.138:352): avc: denied { watch watch_reads } for pid=6783 comm="syz.2.208" path="/10" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 366.460091][ T5241] Bluetooth: hci6: command tx timeout [ 369.503885][ T29] audit: type=1400 audit(1725141847.058:353): avc: denied { name_connect } for pid=6813 comm="syz.1.214" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 369.563460][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.590779][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 369.693624][ C1] ------------[ cut here ]------------ [ 369.700158][ C1] WARNING: CPU: 1 PID: 6811 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 369.711275][ C1] Modules linked in: [ 369.715300][ C1] CPU: 1 UID: 0 PID: 6811 Comm: syz.3.212 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 369.726149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 369.736354][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 369.743744][ C1] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 3a 5c 94 f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 2c 5c 94 f6 90 0f 0b 90 e9 df f0 ff ff [ 369.763462][ C1] RSP: 0018:ffffc90000a18408 EFLAGS: 00010246 [ 369.769567][ C1] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8af75652 [ 369.777632][ C1] RDX: ffff8880277b0000 RSI: ffffffff8af763b6 RDI: 0000000000000004 [ 369.785871][ C1] RBP: ffffc90000a18528 R08: 0000000000000004 R09: 00000000000081e5 [ 369.793905][ C1] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff888029de80e8 [ 369.802019][ C1] R13: 0000000000000000 R14: ffff888029de8000 R15: dffffc0000000000 [ 369.810053][ C1] FS: 00007f23749136c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 369.819193][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.825896][ C1] CR2: 0000000020100000 CR3: 0000000032b84000 CR4: 00000000003506f0 [ 369.834233][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.842264][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.850317][ C1] Call Trace: [ 369.853793][ C1] [ 369.856655][ C1] ? show_regs+0x8c/0xa0 [ 369.860979][ C1] ? __warn+0xe5/0x3c0 [ 369.865270][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 369.871880][ C1] ? report_bug+0x3c0/0x580 [ 369.876527][ C1] ? handle_bug+0x3d/0x70 [ 369.880968][ C1] ? exc_invalid_op+0x17/0x50 [ 369.885707][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 369.890837][ C1] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 369.897220][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 369.903724][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 369.910248][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 369.916734][ C1] mptcp_data_ready+0x30e/0x8e0 [ 369.921672][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 369.927121][ C1] subflow_data_ready+0x51d/0x7d0 [ 369.932247][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 369.937839][ C1] ? __pfx_tcp_grow_window+0x10/0x10 [ 369.943211][ C1] tcp_data_ready+0x146/0x5b0 [ 369.948103][ C1] ? tcp_event_data_recv+0xb6e/0x1410 [ 369.953642][ C1] ? __pfx_tcp_data_ready+0x10/0x10 [ 369.959008][ C1] tcp_data_queue+0x1a6f/0x5280 [ 369.964296][ C1] ? irqentry_exit+0x3b/0x90 [ 369.969538][ C1] ? tcp_urg+0x110/0xb80 [ 369.973940][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 369.979289][ C1] ? tcp_send_dupack+0x780/0x810 [ 369.984481][ C1] ? tcp_rcv_established+0x5f1/0x21c0 [ 369.990168][ C1] tcp_rcv_established+0x8b1/0x21c0 [ 369.995662][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 370.000975][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 370.006483][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 370.012276][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 370.017404][ C1] ? __pfx_ipv4_dst_check+0x10/0x10 [ 370.022826][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 370.027692][ C1] tcp_v4_rcv+0x33a8/0x4390 [ 370.032355][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 370.037308][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 370.043158][ C1] ? read_tsc+0x9/0x20 [ 370.047430][ C1] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 370.053352][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 370.058334][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 370.063976][ C1] ip_local_deliver_finish+0x316/0x570 [ 370.069550][ C1] ip_local_deliver+0x18e/0x1f0 [ 370.074673][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 370.080260][ C1] ip_rcv+0x2c5/0x5d0 [ 370.084377][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 370.088976][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 370.095231][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 370.101813][ C1] ? process_backlog+0x3f1/0x15f0 [ 370.106981][ C1] ? __pfx_lock_release+0x10/0x10 [ 370.112430][ C1] ? mark_held_locks+0x9f/0xe0 [ 370.117416][ C1] ? process_backlog+0x3f1/0x15f0 [ 370.122698][ C1] __netif_receive_skb+0x1d/0x160 [ 370.127841][ C1] process_backlog+0x443/0x15f0 [ 370.133045][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 370.138563][ C1] net_rx_action+0xa92/0x1010 [ 370.143523][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 370.148753][ C1] ? __pfx_mark_lock+0x10/0x10 [ 370.153686][ C1] ? lock_acquire+0x1b1/0x560 [ 370.158595][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 370.163953][ C1] ? sched_clock+0x38/0x60 [ 370.168601][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 370.173720][ C1] ? mark_held_locks+0x9f/0xe0 [ 370.178724][ C1] handle_softirqs+0x216/0x8f0 [ 370.185032][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 370.190587][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 370.196029][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 370.201584][ C1] do_softirq+0xb2/0xf0 [ 370.205861][ C1] [ 370.208805][ C1] [ 370.211781][ C1] __local_bh_enable_ip+0x100/0x120 [ 370.217118][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 370.222990][ C1] __dev_queue_xmit+0x882/0x4300 [ 370.228066][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 370.233329][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 370.238999][ C1] ? call_rcu_zapped+0x20/0xb0 [ 370.243911][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 370.249185][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.254577][ C1] ? __pfx_mark_lock+0x10/0x10 [ 370.259392][ C1] ? find_held_lock+0x2d/0x110 [ 370.264252][ C1] ? __ip_finish_output+0x49e/0x950 [ 370.269532][ C1] ? __pfx_lock_release+0x10/0x10 [ 370.274639][ C1] ? mark_held_locks+0x9f/0xe0 [ 370.279530][ C1] ip_finish_output2+0x16fe/0x25e0 [ 370.284810][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 370.290440][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 370.295571][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 370.300884][ C1] __ip_finish_output+0x49e/0x950 [ 370.306070][ C1] ip_finish_output+0x31/0x310 [ 370.310916][ C1] ip_output+0x13b/0x2a0 [ 370.315214][ C1] ? __pfx_ip_output+0x10/0x10 [ 370.320129][ C1] ip_local_out+0x33e/0x4a0 [ 370.325047][ C1] __ip_queue_xmit+0x747/0x1940 [ 370.330018][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 370.335190][ C1] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 370.340861][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 370.347067][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 370.352654][ C1] tcp_write_xmit+0x809d/0x8490 [ 370.357854][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 370.363693][ C1] tcp_rcv_established+0x93a/0x21c0 [ 370.368969][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 370.375053][ C1] ? __pfx_lock_release+0x10/0x10 [ 370.380736][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 370.386130][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 370.391467][ C1] __release_sock+0x31b/0x400 [ 370.396405][ C1] ? tcp_push+0x221/0x6f0 [ 370.400876][ C1] release_sock+0x5a/0x220 [ 370.405449][ C1] __mptcp_push_pending+0x400/0x560 [ 370.411370][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 370.417181][ C1] ? __virt_addr_valid+0x5e/0x590 [ 370.423275][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 370.430136][ C1] ? __phys_addr_symbol+0x30/0x80 [ 370.435240][ C1] ? __check_object_size+0x497/0x720 [ 370.441180][ C1] mptcp_sendmsg+0x1960/0x1f20 [ 370.448525][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 370.454134][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 370.460887][ C1] inet_sendmsg+0x119/0x140 [ 370.467478][ C1] __sys_sendto+0x42c/0x4e0 [ 370.472449][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 370.479379][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 370.484699][ C1] ? do_syscall_64+0x91/0x250 [ 370.489771][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.495632][ C1] do_syscall_64+0xcd/0x250 [ 370.500420][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.506925][ C1] RIP: 0033:0x7f2373b79eb9 [ 370.511957][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.531820][ C1] RSP: 002b:00007f2374913038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 370.540407][ C1] RAX: ffffffffffffffda RBX: 00007f2373d16058 RCX: 00007f2373b79eb9 [ 370.548861][ C1] RDX: 0000000000100b20 RSI: 0000000020000040 RDI: 0000000000000006 [ 370.556929][ C1] RBP: 00007f2373be793e R08: 0000000000000000 R09: 0000000000000000 [ 370.564988][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.573040][ C1] R13: 0000000000000000 R14: 00007f2373d16058 R15: 00007ffca49a8558 [ 370.581153][ C1] [ 370.584309][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 370.591883][ C1] CPU: 1 UID: 0 PID: 6811 Comm: syz.3.212 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 370.602981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 370.613306][ C1] Call Trace: [ 370.616664][ C1] [ 370.619518][ C1] dump_stack_lvl+0x3d/0x1f0 [ 370.624298][ C1] panic+0x6dc/0x7c0 [ 370.628358][ C1] ? __pfx_panic+0x10/0x10 [ 370.633465][ C1] ? show_trace_log_lvl+0x363/0x500 [ 370.638719][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 370.643895][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 370.651069][ C1] check_panic_on_warn+0xab/0xb0 [ 370.656473][ C1] __warn+0xf1/0x3c0 [ 370.660453][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 370.666914][ C1] report_bug+0x3c0/0x580 [ 370.671391][ C1] handle_bug+0x3d/0x70 [ 370.675866][ C1] exc_invalid_op+0x17/0x50 [ 370.680423][ C1] asm_exc_invalid_op+0x1a/0x20 [ 370.685317][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 370.692399][ C1] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 3a 5c 94 f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 2c 5c 94 f6 90 0f 0b 90 e9 df f0 ff ff [ 370.712314][ C1] RSP: 0018:ffffc90000a18408 EFLAGS: 00010246 [ 370.718421][ C1] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8af75652 [ 370.726420][ C1] RDX: ffff8880277b0000 RSI: ffffffff8af763b6 RDI: 0000000000000004 [ 370.734521][ C1] RBP: ffffc90000a18528 R08: 0000000000000004 R09: 00000000000081e5 [ 370.742527][ C1] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff888029de80e8 [ 370.751438][ C1] R13: 0000000000000000 R14: ffff888029de8000 R15: dffffc0000000000 [ 370.759728][ C1] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 370.766331][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 370.772809][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 370.780085][ C1] mptcp_data_ready+0x30e/0x8e0 [ 370.785354][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 370.790798][ C1] subflow_data_ready+0x51d/0x7d0 [ 370.795879][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 370.801696][ C1] ? __pfx_tcp_grow_window+0x10/0x10 [ 370.807204][ C1] tcp_data_ready+0x146/0x5b0 [ 370.811919][ C1] ? tcp_event_data_recv+0xb6e/0x1410 [ 370.817526][ C1] ? __pfx_tcp_data_ready+0x10/0x10 [ 370.822785][ C1] tcp_data_queue+0x1a6f/0x5280 [ 370.827690][ C1] ? irqentry_exit+0x3b/0x90 [ 370.832836][ C1] ? tcp_urg+0x110/0xb80 [ 370.837120][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 370.842371][ C1] ? tcp_send_dupack+0x780/0x810 [ 370.847557][ C1] ? tcp_rcv_established+0x5f1/0x21c0 [ 370.853591][ C1] tcp_rcv_established+0x8b1/0x21c0 [ 370.858932][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 370.864272][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 370.869875][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 370.875568][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 370.880632][ C1] ? __pfx_ipv4_dst_check+0x10/0x10 [ 370.885849][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 370.890484][ C1] tcp_v4_rcv+0x33a8/0x4390 [ 370.895092][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 370.899998][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 370.905530][ C1] ? read_tsc+0x9/0x20 [ 370.909626][ C1] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 370.915381][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 370.920434][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 370.925841][ C1] ip_local_deliver_finish+0x316/0x570 [ 370.931329][ C1] ip_local_deliver+0x18e/0x1f0 [ 370.936296][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 370.941818][ C1] ip_rcv+0x2c5/0x5d0 [ 370.945836][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 370.950365][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 370.956287][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 370.962814][ C1] ? process_backlog+0x3f1/0x15f0 [ 370.967861][ C1] ? __pfx_lock_release+0x10/0x10 [ 370.973042][ C1] ? mark_held_locks+0x9f/0xe0 [ 370.977838][ C1] ? process_backlog+0x3f1/0x15f0 [ 370.983290][ C1] __netif_receive_skb+0x1d/0x160 [ 370.988372][ C1] process_backlog+0x443/0x15f0 [ 370.993604][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 370.999127][ C1] net_rx_action+0xa92/0x1010 [ 371.003879][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 371.009135][ C1] ? __pfx_mark_lock+0x10/0x10 [ 371.014138][ C1] ? lock_acquire+0x1b1/0x560 [ 371.018844][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 371.024065][ C1] ? sched_clock+0x38/0x60 [ 371.028505][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 371.033409][ C1] ? mark_held_locks+0x9f/0xe0 [ 371.038208][ C1] handle_softirqs+0x216/0x8f0 [ 371.043018][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 371.048425][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 371.053758][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 371.059709][ C1] do_softirq+0xb2/0xf0 [ 371.063945][ C1] [ 371.066899][ C1] [ 371.069847][ C1] __local_bh_enable_ip+0x100/0x120 [ 371.075132][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 371.080313][ C1] __dev_queue_xmit+0x882/0x4300 [ 371.085373][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 371.090437][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 371.096317][ C1] ? call_rcu_zapped+0x20/0xb0 [ 371.101279][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 371.106534][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.111799][ C1] ? __pfx_mark_lock+0x10/0x10 [ 371.116977][ C1] ? find_held_lock+0x2d/0x110 [ 371.121882][ C1] ? __ip_finish_output+0x49e/0x950 [ 371.127392][ C1] ? __pfx_lock_release+0x10/0x10 [ 371.132476][ C1] ? mark_held_locks+0x9f/0xe0 [ 371.137481][ C1] ip_finish_output2+0x16fe/0x25e0 [ 371.142746][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 371.148357][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 371.153415][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 371.158768][ C1] __ip_finish_output+0x49e/0x950 [ 371.163867][ C1] ip_finish_output+0x31/0x310 [ 371.168842][ C1] ip_output+0x13b/0x2a0 [ 371.173260][ C1] ? __pfx_ip_output+0x10/0x10 [ 371.178066][ C1] ip_local_out+0x33e/0x4a0 [ 371.182785][ C1] __ip_queue_xmit+0x747/0x1940 [ 371.187684][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 371.192858][ C1] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 371.198121][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 371.204072][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 371.209847][ C1] tcp_write_xmit+0x809d/0x8490 [ 371.214869][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 371.220576][ C1] tcp_rcv_established+0x93a/0x21c0 [ 371.225924][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 371.231623][ C1] ? __pfx_lock_release+0x10/0x10 [ 371.236716][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 371.241338][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 371.246571][ C1] __release_sock+0x31b/0x400 [ 371.251354][ C1] ? tcp_push+0x221/0x6f0 [ 371.255854][ C1] release_sock+0x5a/0x220 [ 371.260340][ C1] __mptcp_push_pending+0x400/0x560 [ 371.265608][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 371.271380][ C1] ? __virt_addr_valid+0x5e/0x590 [ 371.276434][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 371.283407][ C1] ? __phys_addr_symbol+0x30/0x80 [ 371.288542][ C1] ? __check_object_size+0x497/0x720 [ 371.294004][ C1] mptcp_sendmsg+0x1960/0x1f20 [ 371.298850][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 371.304084][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 371.309427][ C1] inet_sendmsg+0x119/0x140 [ 371.314166][ C1] __sys_sendto+0x42c/0x4e0 [ 371.318728][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 371.323863][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 371.328692][ C1] ? do_syscall_64+0x91/0x250 [ 371.333668][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.338895][ C1] do_syscall_64+0xcd/0x250 [ 371.343447][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.349573][ C1] RIP: 0033:0x7f2373b79eb9 [ 371.354492][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.374137][ C1] RSP: 002b:00007f2374913038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.382678][ C1] RAX: ffffffffffffffda RBX: 00007f2373d16058 RCX: 00007f2373b79eb9 [ 371.390669][ C1] RDX: 0000000000100b20 RSI: 0000000020000040 RDI: 0000000000000006 [ 371.398848][ C1] RBP: 00007f2373be793e R08: 0000000000000000 R09: 0000000000000000 [ 371.406859][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.414971][ C1] R13: 0000000000000000 R14: 00007f2373d16058 R15: 00007ffca49a8558 [ 371.423006][ C1] [ 371.426185][ C1] Kernel Offset: disabled [ 371.430786][ C1] Rebooting in 86400 seconds..