last executing test programs: 29.448721467s ago: executing program 1 (id=490): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 25.716003471s ago: executing program 1 (id=496): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0x0) ioctl$VT_OPENQRY(r3, 0x4b71, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) 19.633226362s ago: executing program 1 (id=510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x35c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') read$msr(r2, &(0x7f0000000040)=""/59, 0xffb5) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000000080)=""/202, 0xca) mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1002, 0x0, 0x8012, 0xffffffffffffffff, 0x83000000) preadv(r1, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x100000000000005c, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000900)=&(0x7f00000008c0)={&(0x7f0000000780)={&(0x7f0000000740)}}, &(0x7f0000000240)=0x18) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) statfs(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x4, 0x0, 0x3, 0xfffffffe, "00207d20201b1470791e0ac74f00"}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 18.826624465s ago: executing program 2 (id=523): io_uring_setup(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x8080) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 16.630154836s ago: executing program 3 (id=516): io_setup(0x4, &(0x7f00000014c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x30]}}, 0x0, 0x1c}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') lseek(r4, 0x0, 0x0) 15.341962359s ago: executing program 2 (id=517): io_uring_setup(0x253d, &(0x7f0000000080)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x1, 0x0}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffd58}, 0x20) mkdir(&(0x7f0000000580)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 15.15997994s ago: executing program 3 (id=518): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d74d4156a221296a665e18aa4c7a0acfd92aa9fb57dbd7cb2c9a9d1cd00b40d432e82bebeb0c176990de4eceb7f41b16a0543f95240979fdcd68b7db60965ca8232034538be7d93df76fead7bddf574c70e3a9724a6614c371b405d4a8126f90990422f978e5e7eb2eb9448d419377df69a9d9635429f06fabcb6655d5dda77848c25b97f87151d9c21709000257580be9edd4f3041fcf2473042c8f55c0aa71ef035f5b89b0d2e4b322ec9787a321450d1c164e8cfaacca90a9773e6b877e38e4237eb5da067a85c2c25a89aeeea93c278cab807f725d6b2077c101c709797a9fa0a0d082797a62", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 14.771510431s ago: executing program 1 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}], 0x1, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) fanotify_init(0x0, 0x0) keyctl$read(0xb, r2, &(0x7f0000000300)=""/207, 0xcf) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) removexattr(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 9.473017096s ago: executing program 0 (id=522): socket$inet6(0xa, 0x2, 0xfffffff9) pivot_root(0x0, 0x0) io_uring_setup(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x5c, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x26, 0x2c, 0x0, @remote, @mcast1, {[], {0x0, 0x0, 0x26, 0x0, @wg=@data={0x4, 0x0, 0x0, "163c56e8b1b95f7de64410bf657e"}}}}}}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60aa862000302c00000000000000000000000000000000000000000000000800001a00000000000452b89078000000006041c93a"], 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c"], 0xf) 9.469555028s ago: executing program 2 (id=524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040), 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002a000900000000000000000004b8"], 0x18}, 0x1, 0x3000000}, 0x0) 8.144058815s ago: executing program 4 (id=525): openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) 8.122540567s ago: executing program 1 (id=526): socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 8.052904759s ago: executing program 3 (id=527): r0 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) semget$private(0x0, 0x1, 0xb62878136430cbcf) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[], 0x232) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) readv(r3, &(0x7f0000000240), 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 7.925512628s ago: executing program 0 (id=528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x3}}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8800}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x4, 0xfffffffd, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000003d1, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000680)=ANY=[], 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc, 0x200000000000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x1}) 7.080939903s ago: executing program 4 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x1) getpgid(0xffffffffffffffff) write$P9_RGETLOCK(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="290000003702eb0004000000000000005e00000000000000cff87298232a0f9280dc2463dbdd3a3f9970d17ed2240848a5", @ANYRESHEX=r0, @ANYBLOB], 0x29) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmsg$can_raw(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80c, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x4100, 0x0) 6.471466995s ago: executing program 3 (id=530): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000001040)={0x1}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xa50]}, &(0x7f0000000100), 0x0, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r3}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) 5.87274711s ago: executing program 4 (id=531): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @dev}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001880)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) open_tree(0xffffffffffffffff, 0x0, 0x1100) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffe, 0x1, 0x3}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0x100000}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) 5.871686068s ago: executing program 1 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = open(0x0, 0x0, 0x146) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x8200, 0x0) dup(0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) 5.704708286s ago: executing program 0 (id=532): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000804) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) prctl$PR_GET_KEEPCAPS(0x7) syz_usb_connect(0x0, 0xfffffffffffffffb, 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 4.366035936s ago: executing program 4 (id=533): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYRESHEX=r0], 0x5c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4bfa, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000e00)={0x50, 0x0, r4}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') unlink(&(0x7f0000000100)='./file0/file0\x00') 4.25151282s ago: executing program 3 (id=534): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0xf900c973b32d4046, 0xa, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0xc8, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) syz_open_procfs(0x0, 0x0) getpgrp(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.065593227s ago: executing program 2 (id=535): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7ffb, 0x220108, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 3.847646458s ago: executing program 0 (id=536): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 2.718288681s ago: executing program 0 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r4, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x8, 0x5}, {0x7, 0xe3db}, {0xb, 0xfea}, {0x4}, {0x0, 0x40}]}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x9f, 0x91, 0x1, 0x8001}, 0x20) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/42, 0x2a}], 0x9, &(0x7f0000000580)=""/26, 0x1a}, 0x2000) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) 2.623268936s ago: executing program 2 (id=538): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=@allocspi={0xfc, 0x16, 0x401, 0x0, 0x0, {{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x33}, @in=@remote}, 0x8, 0xffffffff}, [@migrate={0x4, 0x1b}]}, 0xfc}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) dup2(r4, r3) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3}}, 0x24) close(r0) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8845) 2.373017737s ago: executing program 4 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}) creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x8fa7b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000002380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x63, 0xffffffffffff0001, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 1.612370402s ago: executing program 3 (id=540): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000003c0), &(0x7f0000000400)={0x0, "a754900b76d1ffbae49d53805d9a500bf282eb34c09e735cf630efc4cf915adc6dc55d524a7f5a5a1c334efedb5e2b94ae1a66c19cbf9264ecbaffea1056dc96"}, 0x48, r1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(0x0, 0x80) io_submit(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) request_key(0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r3, r1) ftruncate(0xffffffffffffffff, 0x2000009) r4 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000880)='veth0_virt_wifi\x00') 1.57787632s ago: executing program 0 (id=542): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, 0x0, 0x0, 0x4008080) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) syz_pidfd_open(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006240)={0x2020}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000b70300000000000085000000710000009500000000000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 590.4484ms ago: executing program 4 (id=543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) io_uring_setup(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=544): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x3871000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="66b9630a00000f32f30f090f23403e660f388267000f1f0066b9800000c00f326635010000000f300f01c2bad004b0c0ee66b9550b000066b8654d000066ba000000000f30642626660f0da019ff", 0x4e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype0={0x4, 0xb}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00 audit(1725310334.621:229): avc: denied { write } for pid=5576 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.601129][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 115.736492][ T746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.876625][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.887979][ T9] usb 3-1: Product: syz [ 115.892988][ T9] usb 3-1: Manufacturer: syz [ 115.899666][ T9] usb 3-1: SerialNumber: syz [ 115.933938][ T9] hub 3-1:5.19: bad descriptor, ignoring hub [ 116.023480][ T9] hub 3-1:5.19: probe with driver hub failed with error -5 [ 116.057977][ T9] sierra 3-1:5.19: Sierra USB modem converter detected [ 116.918360][ T746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.981169][ T29] audit: type=1400 audit(1725310336.001:230): avc: denied { read } for pid=5587 comm="syz.0.70" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 117.053588][ T4619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.065324][ T29] audit: type=1400 audit(1725310336.051:231): avc: denied { ioctl } for pid=5587 comm="syz.0.70" path="socket:[8281]" dev="sockfs" ino=8281 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.101760][ T4619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.120616][ T4619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.133417][ T4619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.151818][ T4619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.161911][ T4619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.302845][ T746] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.761686][ T9] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 117.795377][ T29] audit: type=1400 audit(1725310336.821:232): avc: denied { getopt } for pid=5601 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.841532][ T9] usb 3-1: USB disconnect, device number 3 [ 117.908121][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 117.972789][ T29] audit: type=1400 audit(1725310336.931:233): avc: denied { search } for pid=4895 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.026082][ T9] sierra 3-1:5.19: device disconnected [ 118.161517][ T29] audit: type=1400 audit(1725310336.931:234): avc: denied { read } for pid=4895 comm="dhcpcd" name="n68" dev="tmpfs" ino=1737 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.283028][ T746] bridge_slave_1: left allmulticast mode [ 118.301818][ T29] audit: type=1400 audit(1725310336.931:235): avc: denied { open } for pid=4895 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1737 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.302716][ T746] bridge_slave_1: left promiscuous mode [ 118.333919][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.358065][ T29] audit: type=1400 audit(1725310336.931:236): avc: denied { getattr } for pid=4895 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1737 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.411880][ T746] bridge_slave_0: left allmulticast mode [ 118.422881][ T746] bridge_slave_0: left promiscuous mode [ 118.431464][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.724907][ T29] audit: type=1400 audit(1725310337.731:237): avc: denied { read } for pid=5616 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.221127][ T4619] Bluetooth: hci1: command tx timeout [ 120.486553][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 120.486597][ T29] audit: type=1400 audit(1725310339.511:248): avc: denied { getopt } for pid=5636 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.731015][ T29] audit: type=1400 audit(1725310339.741:249): avc: denied { connect } for pid=5636 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.801384][ T746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.824431][ T746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.848948][ T746] bond0 (unregistering): Released all slaves [ 121.301160][ T4619] Bluetooth: hci1: command tx timeout [ 122.322840][ T29] audit: type=1400 audit(1725310341.311:250): avc: denied { setopt } for pid=5648 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.417920][ T4619] Bluetooth: hci1: command tx timeout [ 124.292167][ T29] audit: type=1400 audit(1725310343.311:251): avc: denied { setopt } for pid=5659 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.481183][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 124.741940][ T746] hsr_slave_0: left promiscuous mode [ 124.760070][ T746] hsr_slave_1: left promiscuous mode [ 124.800267][ T746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.818302][ T746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.857453][ T746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.888298][ T746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.036127][ T746] veth1_macvtap: left promiscuous mode [ 125.079191][ T746] veth0_macvtap: left promiscuous mode [ 125.103868][ T746] veth1_vlan: left promiscuous mode [ 125.135794][ T746] veth0_vlan: left promiscuous mode [ 125.199823][ T29] audit: type=1400 audit(1725310344.221:252): avc: denied { create } for pid=5679 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.235660][ T5284] libceph: connect (1)[c::]:6789 error -101 [ 125.242717][ T5284] libceph: mon0 (1)[c::]:6789 connect error [ 125.274174][ T5284] libceph: connect (1)[c::]:6789 error -101 [ 125.301571][ T5284] libceph: mon0 (1)[c::]:6789 connect error [ 125.316000][ T29] audit: type=1400 audit(1725310344.221:253): avc: denied { create } for pid=5679 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.377851][ T5680] ceph: No mds server is up or the cluster is laggy [ 125.429770][ T29] audit: type=1400 audit(1725310344.321:254): avc: denied { create } for pid=5683 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.475260][ T4619] Bluetooth: hci1: command tx timeout [ 125.489028][ T29] audit: type=1400 audit(1725310344.371:255): avc: denied { bind } for pid=5683 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.556627][ T29] audit: type=1400 audit(1725310344.381:256): avc: denied { listen } for pid=5683 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.582578][ T29] audit: type=1400 audit(1725310344.381:257): avc: denied { create } for pid=5683 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.603398][ T29] audit: type=1400 audit(1725310344.401:258): avc: denied { shutdown } for pid=5679 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.665244][ T29] audit: type=1400 audit(1725310344.441:259): avc: denied { accept } for pid=5683 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.171940][ T29] audit: type=1400 audit(1725310345.191:260): avc: denied { create } for pid=5694 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.877591][ T29] audit: type=1400 audit(1725310345.191:261): avc: denied { setopt } for pid=5694 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.250377][ T29] audit: type=1400 audit(1725310346.261:262): avc: denied { name_bind } for pid=5701 comm="syz.2.89" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 127.713531][ T29] audit: type=1400 audit(1725310346.691:263): avc: denied { mount } for pid=5704 comm="syz.1.90" name="/" dev="autofs" ino=8068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.206923][ T746] team0 (unregistering): Port device team_slave_1 removed [ 128.307078][ T29] audit: type=1400 audit(1725310347.331:264): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.370626][ T746] team0 (unregistering): Port device team_slave_0 removed [ 128.701850][ T29] audit: type=1400 audit(1725310347.721:265): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 130.064081][ T5724] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.451355][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.485660][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.522810][ T5593] bridge_slave_0: entered allmulticast mode [ 130.550747][ T5593] bridge_slave_0: entered promiscuous mode [ 130.578796][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.625224][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.682470][ T5593] bridge_slave_1: entered allmulticast mode [ 130.779600][ T5593] bridge_slave_1: entered promiscuous mode [ 130.929510][ T29] audit: type=1400 audit(1725310349.951:266): avc: denied { create } for pid=5739 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.036355][ T29] audit: type=1400 audit(1725310350.021:267): avc: denied { listen } for pid=5739 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.282533][ T29] audit: type=1400 audit(1725310350.031:268): avc: denied { write } for pid=5738 comm="syz.2.96" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 131.306356][ T29] audit: type=1400 audit(1725310350.061:269): avc: denied { write } for pid=5739 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.245653][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.258462][ T29] audit: type=1400 audit(1725310350.521:270): avc: denied { read } for pid=5754 comm="syz.0.98" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.357750][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.396994][ T29] audit: type=1400 audit(1725310350.521:271): avc: denied { open } for pid=5754 comm="syz.0.98" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 133.035622][ T29] audit: type=1400 audit(1725310351.991:272): avc: denied { mount } for pid=5762 comm="syz.0.99" name="/" dev="rpc_pipefs" ino=8116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 133.426544][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.432959][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.749360][ T5593] team0: Port device team_slave_0 added [ 133.780265][ T5593] team0: Port device team_slave_1 added [ 133.898549][ T29] audit: type=1400 audit(1725310352.911:273): avc: denied { lock } for pid=5772 comm="syz.0.101" path="socket:[8563]" dev="sockfs" ino=8563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 134.871108][ T29] audit: type=1400 audit(1725310352.921:274): avc: denied { wake_alarm } for pid=5772 comm="syz.0.101" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.975763][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.023786][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.086168][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.149949][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.341319][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.069483][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.092481][ T29] audit: type=1400 audit(1725310355.081:275): avc: denied { unlink } for pid=5774 comm="syz.1.102" name="#1" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.365855][ T29] audit: type=1400 audit(1725310355.391:276): avc: denied { create } for pid=5790 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.467271][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.468335][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.486467][ T29] audit: type=1400 audit(1725310355.451:277): avc: denied { ioctl } for pid=5790 comm="syz.0.105" path="socket:[8580]" dev="sockfs" ino=8580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.659779][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.659954][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.661044][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.661233][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.163311][ T5791] team0: Port device bridge0 added [ 137.930257][ T5593] hsr_slave_0: entered promiscuous mode [ 137.973133][ T5593] hsr_slave_1: entered promiscuous mode [ 137.987002][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.987081][ T5593] Cannot create hsr debugfs directory [ 138.244106][ T5793] bridge_slave_1: left allmulticast mode [ 138.249816][ T5793] bridge_slave_1: left promiscuous mode [ 138.256474][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.279053][ T5793] bridge_slave_0: left allmulticast mode [ 138.284878][ T5793] bridge_slave_0: left promiscuous mode [ 138.296893][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.298424][ T29] audit: type=1400 audit(1725310357.311:278): avc: denied { block_suspend } for pid=5800 comm="syz.1.107" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.190629][ T29] audit: type=1400 audit(1725310358.211:279): avc: denied { listen } for pid=5803 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.253990][ T5793] team0: Port device bridge0 removed [ 139.378493][ T29] audit: type=1400 audit(1725310358.361:280): avc: denied { accept } for pid=5803 comm="iou-wrk-5808" lport=56013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.776226][ T29] audit: type=1400 audit(1725310358.801:281): avc: denied { create } for pid=5821 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 140.116624][ T5829] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 140.402926][ T29] audit: type=1400 audit(1725310359.171:282): avc: denied { mount } for pid=5826 comm="syz.1.113" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 140.664823][ T29] audit: type=1400 audit(1725310359.191:283): avc: denied { read } for pid=5826 comm="syz.1.113" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.694062][ T29] audit: type=1400 audit(1725310359.191:284): avc: denied { open } for pid=5826 comm="syz.1.113" path="/23/file0" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.307370][ T5838] input: syz1 as /devices/virtual/input/input5 [ 141.416165][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 141.416210][ T29] audit: type=1400 audit(1725310360.421:289): avc: denied { listen } for pid=5835 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.046045][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 142.181019][ T4619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.297493][ T29] audit: type=1400 audit(1725310361.321:290): avc: denied { read } for pid=4666 comm="acpid" name="event4" dev="devtmpfs" ino=2345 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.411753][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 142.423547][ T29] audit: type=1400 audit(1725310361.321:291): avc: denied { open } for pid=4666 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2345 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.523647][ T29] audit: type=1400 audit(1725310361.321:292): avc: denied { ioctl } for pid=4666 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2345 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.858326][ T5866] netlink: 'syz.0.119': attribute type 3 has an invalid length. [ 143.866565][ T5866] netlink: 'syz.0.119': attribute type 28 has an invalid length. [ 143.875239][ T5866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.119'. [ 144.863895][ T29] audit: type=1400 audit(1725310363.891:293): avc: denied { create } for pid=5861 comm="syz.1.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.958406][ T29] audit: type=1400 audit(1725310363.971:294): avc: denied { write } for pid=5861 comm="syz.1.120" name="file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.021458][ T5332] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.090770][ T29] audit: type=1400 audit(1725310363.971:295): avc: denied { open } for pid=5861 comm="syz.1.120" path="/25/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.231105][ T5332] usb 1-1: device descriptor read/64, error -71 [ 145.237512][ T29] audit: type=1400 audit(1725310364.241:296): avc: denied { ioctl } for pid=5861 comm="syz.1.120" path="socket:[8738]" dev="sockfs" ino=8738 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.469400][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.510757][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.531018][ T5332] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.604608][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.721012][ T5332] usb 1-1: device descriptor read/64, error -71 [ 145.748358][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.796616][ T5284] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 145.882043][ T5332] usb usb1-port1: attempt power cycle [ 146.014724][ T5284] usb 3-1: No LPM exit latency info found, disabling LPM. [ 146.060597][ T5284] usb 3-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 146.113826][ T5284] usb 3-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.173855][ T5284] usb 3-1: config 1 interface 0 has no altsetting 0 [ 146.215507][ T5284] usb 3-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 146.275989][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.341649][ T5332] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.389556][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.402923][ T5332] usb 1-1: device descriptor read/8, error -71 [ 146.404127][ T5284] usb 3-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 146.503720][ T4619] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 146.516808][ T4619] Bluetooth: hci2: Injecting HCI hardware error event [ 146.525774][ T4619] Bluetooth: hci2: hardware error 0x00 [ 146.535987][ T5284] usb 3-1: SerialNumber: Ъ [ 146.564080][ T5871] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.575344][ T5871] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.595435][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.656561][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.664121][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.813603][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.821000][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.150739][ T29] audit: type=1400 audit(1725310366.111:297): avc: denied { mount } for pid=5888 comm="syz.3.123" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.701729][ T5871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=5871 comm=syz.2.121 [ 147.867065][ T29] audit: type=1400 audit(1725310366.891:298): avc: denied { unmount } for pid=5236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.955628][ T5284] usbhid 3-1:1.0: can't add hid device: -71 [ 147.964115][ T29] audit: type=1400 audit(1725310366.971:299): avc: denied { create } for pid=5886 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 147.969618][ T5284] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 148.049912][ T5593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.094790][ T5593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.192603][ T5899] netlink: 104 bytes leftover after parsing attributes in process `syz.3.125'. [ 148.203703][ T29] audit: type=1400 audit(1725310367.221:300): avc: denied { nlmsg_read } for pid=5897 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.224943][ T5284] usb 3-1: USB disconnect, device number 4 [ 148.380480][ T5899] netlink: 180 bytes leftover after parsing attributes in process `syz.3.125'. [ 148.661908][ T4619] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 149.266629][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.436767][ T29] audit: type=1400 audit(1725310368.461:301): avc: denied { getopt } for pid=5923 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.590943][ T29] audit: type=1400 audit(1725310368.611:302): avc: denied { connect } for pid=5923 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.995272][ T29] audit: type=1400 audit(1725310369.021:303): avc: denied { read } for pid=5939 comm="syz.3.131" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.020072][ T29] audit: type=1400 audit(1725310369.021:304): avc: denied { open } for pid=5939 comm="syz.3.131" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.163168][ T29] audit: type=1400 audit(1725310369.031:305): avc: denied { ioctl } for pid=5939 comm="syz.3.131" path="/dev/dri/card0" dev="devtmpfs" ino=629 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.254692][ T29] audit: type=1400 audit(1725310369.111:306): avc: denied { read } for pid=5939 comm="syz.3.131" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.106155][ T5593] veth0_vlan: entered promiscuous mode [ 151.225182][ T5593] veth1_vlan: entered promiscuous mode [ 151.460785][ T5593] veth0_macvtap: entered promiscuous mode [ 152.438030][ T5593] veth1_macvtap: entered promiscuous mode [ 152.524031][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.569965][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.591690][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 152.591708][ T29] audit: type=1400 audit(1725310371.611:309): avc: denied { connect } for pid=5965 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.638084][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.670981][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.689301][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.896822][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.068133][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.745843][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.784149][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.792042][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.820611][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.873514][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.910786][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.955610][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.992389][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 153.994904][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.019498][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.026606][ T9] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 154.040049][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.060406][ T9] usb 3-1: config 0 has no interface number 1 [ 154.063258][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.076274][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.076305][ T9] usb 3-1: config 0 interface 206 has no altsetting 0 [ 154.142879][ T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 154.157126][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.178418][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.205303][ T9] usb 3-1: Product: syz [ 154.209590][ T9] usb 3-1: Manufacturer: syz [ 154.223437][ T9] usb 3-1: SerialNumber: syz [ 154.237089][ T5997] warning: `syz.3.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.254221][ T9] usb 3-1: config 0 descriptor?? [ 154.293520][ T5593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.340483][ T5593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.343768][ T5995] trusted_key: encrypted_key: keylen parameter is missing [ 154.377480][ T5593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.396520][ T5593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.506102][ T29] audit: type=1400 audit(1725310373.531:310): avc: denied { read } for pid=5998 comm="syz.0.141" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 154.593874][ T4619] Bluetooth: hci0: command tx timeout [ 154.666320][ T29] audit: type=1400 audit(1725310373.531:311): avc: denied { open } for pid=5998 comm="syz.0.141" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 154.689768][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.865247][ T29] audit: type=1400 audit(1725310373.561:312): avc: denied { ioctl } for pid=5998 comm="syz.0.141" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 155.171799][ T29] audit: type=1400 audit(1725310374.191:313): avc: denied { write } for pid=5976 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.246566][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.272241][ T29] audit: type=1400 audit(1725310374.191:314): avc: denied { nlmsg_read } for pid=5976 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.312285][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.359036][ T29] audit: type=1400 audit(1725310374.231:315): avc: denied { create } for pid=6008 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.451298][ T29] audit: type=1400 audit(1725310374.361:316): avc: denied { getopt } for pid=6008 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.471596][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.671606][ T29] audit: type=1400 audit(1725310374.371:317): avc: denied { setopt } for pid=6008 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.133345][ T29] audit: type=1400 audit(1725310375.151:318): avc: denied { read } for pid=6008 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.229534][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.243551][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.305608][ T6015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.335096][ T6015] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 156.377375][ T9] usb 3-1: USB disconnect, device number 5 [ 156.484927][ T6015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.535003][ T6015] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 157.140690][ T6015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.150683][ T6015] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 157.216158][ T5332] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 157.751508][ T5332] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 157.767942][ T5332] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 157.807559][ T5332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.877853][ T5332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 157.937497][ T5332] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 158.002983][ T5332] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 158.077756][ T5332] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 158.141049][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.170808][ T5332] usb 2-1: Product: 䇜띔➒䬎잃♞ᨨ䂹鋰禪䤸︉畘䒋䘊菁㲝佸ꚃ깆㰵ၹ៍㯁ᒒ빒䁴䱕鴺餹偖᛭到⿣꺤溽ᗆ䃲 [ 158.219286][ T5332] usb 2-1: config 0 descriptor?? [ 158.235128][ T5332] hub 2-1:0.0: bad descriptor, ignoring hub [ 158.250954][ T5332] hub 2-1:0.0: probe with driver hub failed with error -5 [ 159.357306][ T6051] tipc: Started in network mode [ 159.395733][ T6051] tipc: Node identity 7298371ac259, cluster identity 4711 [ 159.408009][ T6051] tipc: Enabled bearer , priority 0 [ 159.438833][ T6056] syzkaller0: MTU too low for tipc bearer [ 159.444883][ T6056] tipc: Disabling bearer [ 159.661407][ T6015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.674039][ T5317] usb 2-1: USB disconnect, device number 2 [ 159.694028][ T6015] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 159.899156][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 159.899175][ T29] audit: type=1400 audit(1725310378.901:320): avc: denied { create } for pid=6063 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 161.071330][ T29] audit: type=1400 audit(1725310380.091:321): avc: denied { search } for pid=4663 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.565653][ T29] audit: type=1400 audit(1725310381.591:322): avc: denied { read } for pid=6098 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.643951][ T29] audit: type=1400 audit(1725310381.671:323): avc: denied { read } for pid=6098 comm="syz.1.153" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.666899][ T29] audit: type=1400 audit(1725310381.671:324): avc: denied { open } for pid=6098 comm="syz.1.153" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.708000][ T29] audit: type=1400 audit(1725310381.731:325): avc: denied { ioctl } for pid=6098 comm="syz.1.153" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.741130][ T29] audit: type=1400 audit(1725310381.731:326): avc: denied { set_context_mgr } for pid=6098 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 164.391132][ T29] audit: type=1400 audit(1725310381.941:327): avc: denied { read } for pid=6104 comm="syz.0.155" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.696498][ T29] audit: type=1400 audit(1725310381.951:328): avc: denied { open } for pid=6104 comm="syz.0.155" path="/dev/iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.970192][ T29] audit: type=1400 audit(1725310381.961:329): avc: denied { ioctl } for pid=6104 comm="syz.0.155" path="/dev/iommu" dev="devtmpfs" ino=626 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.976268][ T29] audit: type=1400 audit(1725310384.091:330): avc: denied { write } for pid=6113 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.181753][ T29] audit: type=1326 audit(1725310384.111:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.4.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x0 [ 166.234415][ T29] audit: type=1400 audit(1725310385.261:332): avc: denied { write } for pid=6123 comm="syz.4.159" name="rdma_cm" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.690684][ T29] audit: type=1400 audit(1725310386.711:333): avc: denied { write } for pid=6135 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.927877][ T29] audit: type=1400 audit(1725310386.761:334): avc: denied { setopt } for pid=6135 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.080184][ T29] audit: type=1400 audit(1725310386.761:335): avc: denied { write } for pid=6135 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.103619][ T5285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.245292][ T29] audit: type=1400 audit(1725310386.761:336): avc: denied { connect } for pid=6135 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.264693][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.274255][ T29] audit: type=1400 audit(1725310386.761:337): avc: denied { name_connect } for pid=6135 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 168.339427][ T29] audit: type=1400 audit(1725310387.101:338): avc: denied { create } for pid=6142 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.488243][ T5285] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.549250][ T5285] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.580957][ T5285] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.630977][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.649675][ T6134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.673616][ T5285] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.809031][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.820729][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.829465][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.838120][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.846215][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.853927][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.911507][ T4619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.936805][ T4619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.945816][ T4619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.968395][ T4619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.981789][ T4619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.989195][ T4619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.501448][ T1076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.596289][ T9] usb 2-1: USB disconnect, device number 3 [ 169.857739][ T1076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.069203][ T1076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.118434][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 170.118447][ T29] audit: type=1400 audit(1725310389.141:341): avc: denied { bind } for pid=6164 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.354584][ T29] audit: type=1400 audit(1725310389.141:342): avc: denied { name_bind } for pid=6164 comm="syz.4.166" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 171.140634][ T4619] Bluetooth: hci0: command tx timeout [ 171.242905][ T29] audit: type=1400 audit(1725310389.141:343): avc: denied { node_bind } for pid=6164 comm="syz.4.166" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 171.298359][ T29] audit: type=1400 audit(1725310389.501:344): avc: denied { name_connect } for pid=6164 comm="syz.4.166" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 171.331620][ T29] audit: type=1400 audit(1725310390.321:345): avc: denied { getopt } for pid=6142 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.540071][ T1076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.244168][ T6149] chnl_net:caif_netlink_parms(): no params data found [ 172.426704][ T1076] bridge_slave_1: left allmulticast mode [ 172.483458][ T1076] bridge_slave_1: left promiscuous mode [ 172.519809][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.561851][ T29] audit: type=1400 audit(1725310391.581:346): avc: denied { connect } for pid=6198 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.612184][ T1076] bridge_slave_0: left allmulticast mode [ 172.627970][ T1076] bridge_slave_0: left promiscuous mode [ 172.647682][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.221227][ T5249] Bluetooth: hci0: command tx timeout [ 174.150088][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.185799][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.238040][ T1076] bond0 (unregistering): Released all slaves [ 174.393218][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 174.860948][ T29] audit: type=1400 audit(1725310393.871:347): avc: denied { ioctl } for pid=6221 comm="syz.3.176" path="socket:[10017]" dev="sockfs" ino=10017 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.867866][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 175.078943][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.109835][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.131131][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 175.140016][ T6149] bridge_slave_0: entered allmulticast mode [ 175.162660][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 175.164689][ T6149] bridge_slave_0: entered promiscuous mode [ 175.209108][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 175.240617][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.258352][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.290754][ T25] usb 2-1: Product: syz [ 175.299727][ T29] audit: type=1400 audit(1725310394.321:348): avc: denied { write } for pid=6228 comm="syz.4.178" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.321868][ T25] usb 2-1: Manufacturer: syz [ 175.326498][ T25] usb 2-1: SerialNumber: syz [ 175.331870][ T5249] Bluetooth: hci0: command tx timeout [ 175.407950][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.433346][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.443151][ T6149] bridge_slave_1: entered allmulticast mode [ 175.454507][ T6149] bridge_slave_1: entered promiscuous mode [ 175.698863][ T29] audit: type=1400 audit(1725310394.691:349): avc: denied { nlmsg_write } for pid=6217 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.862694][ T1076] hsr_slave_0: left promiscuous mode [ 175.881141][ T5284] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.933448][ T1076] hsr_slave_1: left promiscuous mode [ 175.945959][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.967298][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.999119][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.021583][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.045276][ T25] cdc_ncm 2-1:1.0: bind() failure [ 176.142737][ T25] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 176.143818][ T5284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.174465][ T25] cdc_ncm 2-1:1.1: bind() failure [ 176.175080][ T1076] veth1_macvtap: left promiscuous mode [ 176.195410][ T5284] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 176.211069][ T1076] veth0_macvtap: left promiscuous mode [ 176.223029][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.231586][ T25] usb 2-1: USB disconnect, device number 4 [ 176.232192][ T1076] veth1_vlan: left promiscuous mode [ 176.255295][ T1076] veth0_vlan: left promiscuous mode [ 176.276365][ T5284] usb 5-1: config 0 descriptor?? [ 176.299502][ T5284] usb 5-1: bad CDC descriptors [ 177.148448][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.383888][ T5249] Bluetooth: hci0: command tx timeout [ 177.539666][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 177.637184][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 178.214728][ T6261] CIFS: Unable to determine destination address [ 178.313900][ T29] audit: type=1400 audit(1725310397.341:350): avc: denied { mounton } for pid=6259 comm="syz.1.182" path="/proc/173/task" dev="proc" ino=10041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 178.409108][ T5285] usb 5-1: USB disconnect, device number 2 [ 182.447746][ T29] audit: type=1400 audit(1725310401.471:351): avc: denied { setopt } for pid=6265 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.481657][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 182.745029][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.830628][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.281933][ T29] audit: type=1400 audit(1725310402.251:352): avc: denied { connect } for pid=6274 comm="syz.3.186" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.708474][ T6279] netlink: 'syz.3.186': attribute type 12 has an invalid length. [ 184.016959][ T6149] team0: Port device team_slave_0 added [ 184.044482][ T6149] team0: Port device team_slave_1 added [ 184.499895][ T6290] capability: warning: `syz.3.188' uses 32-bit capabilities (legacy support in use) [ 184.516124][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.578282][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.673547][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.841282][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.905521][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.905558][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.075327][ T29] audit: type=1400 audit(1725310404.081:353): avc: denied { getopt } for pid=6293 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.075396][ T29] audit: type=1400 audit(1725310404.101:354): avc: denied { accept } for pid=6293 comm="syz.4.190" path="/10/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 185.387446][ T6149] hsr_slave_0: entered promiscuous mode [ 185.428770][ T6149] hsr_slave_1: entered promiscuous mode [ 185.458246][ T6149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.458271][ T6149] Cannot create hsr debugfs directory [ 187.531484][ T29] audit: type=1400 audit(1725310406.561:355): avc: denied { shutdown } for pid=6340 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.711653][ T6149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.826394][ T6149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.921521][ T6149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.997116][ T6149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.676251][ T29] audit: type=1400 audit(1725310408.661:356): avc: denied { create } for pid=6382 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 190.511517][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.610942][ T29] audit: type=1400 audit(1725310409.631:357): avc: denied { write } for pid=6391 comm="syz.3.204" name="renderD128" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.663728][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.868870][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.876064][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.024368][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.031527][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.238756][ T6149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.311125][ T6149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.673572][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.211'. [ 194.829764][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.836345][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.892075][ T29] audit: type=1400 audit(1725310413.901:358): avc: denied { ioctl } for pid=6423 comm="syz.4.210" path="socket:[11439]" dev="sockfs" ino=11439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.977813][ T29] audit: type=1400 audit(1725310413.911:359): avc: denied { bind } for pid=6423 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.044969][ T29] audit: type=1400 audit(1725310414.071:360): avc: denied { write } for pid=6423 comm="syz.4.210" path="socket:[11439]" dev="sockfs" ino=11439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.369917][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.499154][ T6426] syz.3.208 (6426): drop_caches: 2 [ 195.653890][ T6149] veth0_vlan: entered promiscuous mode [ 195.705720][ T6149] veth1_vlan: entered promiscuous mode [ 196.897646][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'. [ 197.203962][ T6149] veth0_macvtap: entered promiscuous mode [ 197.286897][ T6149] veth1_macvtap: entered promiscuous mode [ 197.358537][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.378682][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.395968][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.407149][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.420391][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.444711][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.459908][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.472257][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.505872][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.586375][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.616502][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.636696][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.669192][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.692093][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.703014][ T6456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6456 comm=syz.3.214 [ 197.736910][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.758280][ T6460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6460 comm=syz.3.214 [ 197.801860][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.833118][ T6460] Zero length message leads to an empty skb [ 197.849677][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.903556][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.964775][ T6149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.014107][ T6149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.039312][ T29] audit: type=1326 audit(1725310417.051:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 198.040987][ T6149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.136964][ T29] audit: type=1326 audit(1725310417.061:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 198.165656][ T6149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.354226][ T29] audit: type=1326 audit(1725310417.061:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 198.378627][ T29] audit: type=1326 audit(1725310417.061:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 199.257079][ T29] audit: type=1326 audit(1725310417.061:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 199.541744][ T29] audit: type=1326 audit(1725310417.141:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 199.565400][ T29] audit: type=1326 audit(1725310417.141:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 199.565701][ T5285] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.426833][ T29] audit: type=1326 audit(1725310417.141:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 200.452307][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 200.495013][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.536033][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.574297][ T5285] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.593840][ T29] audit: type=1326 audit(1725310417.141:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fcaf7bdd7 code=0x7ffc0000 [ 200.624819][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.682849][ T5285] usb 5-1: config 0 descriptor?? [ 200.744127][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.793672][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.881441][ T29] audit: type=1326 audit(1725310417.141:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.030565][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.039788][ T29] audit: type=1326 audit(1725310417.141:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.063278][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.117229][ T29] audit: type=1326 audit(1725310417.151:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.193725][ T29] audit: type=1326 audit(1725310417.151:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.257450][ T29] audit: type=1326 audit(1725310417.151:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.310308][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 201.355766][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 201.366293][ T29] audit: type=1326 audit(1725310417.211:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.485936][ T29] audit: type=1326 audit(1725310417.211:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 201.493167][ T5285] usb 5-1: USB disconnect, device number 3 [ 201.760486][ T29] audit: type=1326 audit(1725310417.211:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7ffc0000 [ 202.440640][ T6495] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 202.616694][ T6500] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 202.705875][ T6505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.822853][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 203.007449][ T5286] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.237572][ T5286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.257034][ T5286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.283217][ T5286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.335409][ T5286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.483709][ T5286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.513504][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.617094][ T5286] usb 1-1: Product: syz [ 203.623598][ T5286] usb 1-1: Manufacturer: syz [ 203.653280][ T5286] cdc_wdm 1-1:1.0: skipping garbage [ 203.658537][ T5286] cdc_wdm 1-1:1.0: skipping garbage [ 203.708592][ T5286] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 203.721141][ T5286] cdc_wdm 1-1:1.0: Unknown control protocol [ 204.155230][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 204.179076][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 205.704370][ T6533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.010269][ T5286] usb 1-1: USB disconnect, device number 8 [ 206.698001][ T25] IPVS: starting estimator thread 0... [ 206.838309][ T6537] IPVS: using max 22 ests per chain, 52800 per kthread [ 209.061734][ T5317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 209.525133][ T5317] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.561052][ T5317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.624285][ T5317] usb 2-1: config 0 descriptor?? [ 209.721289][ T5317] cp210x 2-1:0.0: cp210x converter detected [ 210.171586][ T5317] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 210.480870][ T6568] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 210.952276][ T5317] usb 2-1: cp210x converter now attached to ttyUSB0 [ 211.411716][ T5285] usb 2-1: USB disconnect, device number 5 [ 211.433877][ T5285] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 211.469525][ T5285] cp210x 2-1:0.0: device disconnected [ 213.443735][ T6586] 9pnet_fd: Insufficient options for proto=fd [ 213.547683][ T4619] Bluetooth: hci5: sending frame failed (-49) [ 213.555368][ T5249] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 214.071696][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 214.071770][ T29] audit: type=1400 audit(1725310433.061:414): avc: denied { mount } for pid=6588 comm="syz.4.244" name="/" dev="ramfs" ino=11874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 218.049068][ T29] audit: type=1400 audit(1725310436.211:415): avc: denied { write } for pid=6601 comm="syz.0.248" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.691833][ T6610] syz.0.248 (6610): drop_caches: 2 [ 220.114356][ T29] audit: type=1326 audit(1725310439.131:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 220.977668][ T29] audit: type=1326 audit(1725310439.171:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 221.031410][ T29] audit: type=1400 audit(1725310439.261:418): avc: denied { checkpoint_restore } for pid=6613 comm="syz.2.251" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.114186][ T29] audit: type=1326 audit(1725310439.961:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 221.225189][ T29] audit: type=1326 audit(1725310439.961:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 221.277807][ T6621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.382736][ T29] audit: type=1326 audit(1725310439.971:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 221.479258][ T29] audit: type=1326 audit(1725310439.981:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 222.377637][ T29] audit: type=1326 audit(1725310439.981:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 222.469725][ T29] audit: type=1326 audit(1725310439.981:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 222.736495][ T29] audit: type=1326 audit(1725310439.981:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa439179eb9 code=0x7ffc0000 [ 224.915774][ T6644] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.255'. [ 226.850985][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 226.851005][ T29] audit: type=1400 audit(1725310445.871:435): avc: denied { ioctl } for pid=6659 comm="syz.0.261" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.881339][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.337580][ T6664] xt_hashlimit: max too large, truncated to 1048576 [ 227.366501][ T6664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.917350][ T4619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.950688][ T4619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.992118][ T4619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.014561][ T4619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.022511][ T4619] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.029924][ T4619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.380259][ T29] audit: type=1400 audit(1725310447.401:436): avc: denied { validate_trans } for pid=6674 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 228.405484][ T6680] usb usb8: usbfs: process 6680 (syz.4.265) did not claim interface 0 before use [ 228.424666][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.547636][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.632346][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.958880][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.159806][ T29] audit: type=1400 audit(1725310448.171:437): avc: denied { getopt } for pid=6681 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.101553][ T5249] Bluetooth: hci5: command tx timeout [ 230.343778][ T52] bridge_slave_1: left allmulticast mode [ 230.389214][ T52] bridge_slave_1: left promiscuous mode [ 230.620713][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.922286][ T52] bridge_slave_0: left allmulticast mode [ 230.947805][ T52] bridge_slave_0: left promiscuous mode [ 230.980411][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.953967][ T6735] capability: warning: `syz.2.274' uses deprecated v2 capabilities in a way that may be insecure [ 232.181179][ T5249] Bluetooth: hci5: command tx timeout [ 232.505654][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.533217][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.546166][ T52] bond0 (unregistering): Released all slaves [ 232.569520][ T52] bond1 (unregistering): Released all slaves [ 232.673063][ T6670] chnl_net:caif_netlink_parms(): no params data found [ 233.839008][ T29] audit: type=1326 audit(1725310452.851:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd47c579eb9 code=0x0 [ 234.261038][ T5249] Bluetooth: hci5: command tx timeout [ 235.280047][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.122381][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.141231][ T6670] bridge_slave_0: entered allmulticast mode [ 236.191022][ T6670] bridge_slave_0: entered promiscuous mode [ 236.205025][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.251812][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.266640][ T6670] bridge_slave_1: entered allmulticast mode [ 236.283044][ T6670] bridge_slave_1: entered promiscuous mode [ 236.341174][ T5249] Bluetooth: hci5: command tx timeout [ 236.397605][ T52] hsr_slave_0: left promiscuous mode [ 236.457438][ T52] hsr_slave_1: left promiscuous mode [ 236.546854][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.611752][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.639885][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.655410][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.710053][ T52] veth1_macvtap: left promiscuous mode [ 236.738730][ T52] veth0_macvtap: left promiscuous mode [ 236.739003][ T52] veth1_vlan: left promiscuous mode [ 236.739171][ T52] veth0_vlan: left promiscuous mode [ 241.682790][ T52] team0 (unregistering): Port device team_slave_1 removed [ 241.872231][ T52] team0 (unregistering): Port device team_slave_0 removed [ 241.923789][ T6820] xt_TCPMSS: Only works on TCP SYN packets [ 242.034570][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.053290][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.081318][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.111400][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.119690][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 242.131435][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.726269][ T6670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.773653][ T6670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.942204][ T6670] team0: Port device team_slave_0 added [ 242.953769][ T6670] team0: Port device team_slave_1 added [ 243.085218][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.116073][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.260840][ T6833] mmap: syz.2.294 (6833) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.284020][ T6670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.558549][ T6828] sp0: Synchronizing with TNC [ 244.506435][ T5249] Bluetooth: hci2: command tx timeout [ 244.807771][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.827183][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.755482][ T6670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.838058][ T6828] libceph: resolve '0.0' (ret=-3): failed [ 245.990746][ T29] audit: type=1400 audit(1725310464.991:439): avc: denied { ioctl } for pid=6842 comm="syz.4.297" path="socket:[12207]" dev="sockfs" ino=12207 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 246.581369][ T5249] Bluetooth: hci2: command tx timeout [ 249.864808][ T5249] Bluetooth: hci2: command tx timeout [ 251.599194][ T6670] hsr_slave_0: entered promiscuous mode [ 251.634204][ T6670] hsr_slave_1: entered promiscuous mode [ 251.658795][ T6670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.677132][ T6670] Cannot create hsr debugfs directory [ 251.945899][ T5249] Bluetooth: hci2: command tx timeout [ 252.756499][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.899954][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.011010][ T5288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 253.034067][ T5284] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 253.259059][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 253.305483][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.352660][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.356551][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.550916][ T5284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.601217][ T5284] usb 3-1: string descriptor 0 read error: -22 [ 253.607507][ T5284] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 253.620468][ T5288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.632461][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.640593][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.660764][ T5284] usb 3-1: config 0 descriptor?? [ 253.684110][ T5288] usb 5-1: config 0 descriptor?? [ 253.802301][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.981164][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 254.106256][ T6895] dlm: non-version read from control device 0 [ 254.198464][ T5288] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 254.216179][ T5288] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 254.250666][ T5288] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 254.332744][ T5284] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 254.364252][ T5288] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 254.443628][ T5284] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 254.477483][ T5284] dib0700: firmware download failed at 7 with -22 [ 254.569592][ T5284] usb 3-1: USB disconnect, device number 6 [ 254.724880][ T5286] usb 5-1: USB disconnect, device number 4 [ 255.845882][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.869829][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.913541][ T6821] bridge_slave_0: entered allmulticast mode [ 255.965017][ T6821] bridge_slave_0: entered promiscuous mode [ 256.023512][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.055595][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.251275][ T6821] bridge_slave_1: entered allmulticast mode [ 256.266449][ T29] audit: type=1400 audit(1725310475.291:440): avc: denied { read } for pid=6910 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 256.278364][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.321667][ T6921] 9pnet_fd: Insufficient options for proto=fd [ 257.329944][ T6821] bridge_slave_1: entered promiscuous mode [ 258.606690][ T29] audit: type=1326 audit(1725310477.631:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7fc00000 [ 258.676000][ T29] audit: type=1326 audit(1725310477.661:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fcaf79eb9 code=0x7fc00000 [ 258.804043][ T29] audit: type=1326 audit(1725310477.711:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcaf79eb9 code=0x7fc00000 [ 259.044223][ T29] audit: type=1400 audit(1725310478.071:444): avc: denied { create } for pid=6942 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 259.335414][ T29] audit: type=1326 audit(1725310478.351:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fcaf79eb9 code=0x7fc00000 [ 260.091057][ T29] audit: type=1400 audit(1725310479.111:446): avc: denied { map } for pid=6949 comm="syz.4.313" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 260.921573][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.950084][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.964675][ T35] bond0 (unregistering): Released all slaves [ 261.563546][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.638668][ T35] tipc: Left network mode [ 261.660204][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.252082][ T6960] syz.3.315 (6960): drop_caches: 2 [ 262.323962][ T29] audit: type=1400 audit(1725310480.881:447): avc: denied { append } for pid=6958 comm="syz.3.315" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.719694][ T6821] team0: Port device team_slave_0 added [ 262.756012][ T5285] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 262.792786][ T29] audit: type=1400 audit(1725310481.821:448): avc: denied { accept } for pid=6965 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.847585][ T6821] team0: Port device team_slave_1 added [ 262.953294][ T5285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.969237][ T5285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.986337][ T5285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 263.028863][ T5285] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 263.049879][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.081491][ T6963] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.111197][ T5285] hub 3-1:1.0: bad descriptor, ignoring hub [ 263.124290][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.139285][ T5285] hub 3-1:1.0: probe with driver hub failed with error -5 [ 263.146653][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.153757][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 263.172589][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.184924][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 263.194128][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.205413][ T5285] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 263.251952][ T5285] cdc_wdm 3-1:1.0: Unknown control protocol [ 263.280640][ T35] hsr_slave_0: left promiscuous mode [ 263.305803][ T35] hsr_slave_1: left promiscuous mode [ 263.321326][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.339910][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.361728][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.375404][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.428649][ T35] veth1_macvtap: left promiscuous mode [ 263.446910][ T35] veth0_macvtap: left promiscuous mode [ 263.462488][ T35] veth1_vlan: left promiscuous mode [ 263.472605][ T35] veth0_vlan: left promiscuous mode [ 264.094632][ T6963] usb 3-1: reset full-speed USB device number 7 using dummy_hcd [ 264.797342][ T6968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.968802][ T29] audit: type=1400 audit(1725310483.931:449): avc: denied { create } for pid=6973 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.000772][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.007665][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.013986][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.020602][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.026929][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.033541][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.039859][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.046471][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.052793][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.059407][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.065732][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.072334][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.078626][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.085227][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.091639][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.098238][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.104564][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.111165][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.117467][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 265.124065][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 265.595504][ T5317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 265.737981][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.765668][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.791103][ T5317] usb 4-1: Using ep0 maxpacket: 16 [ 265.806464][ T35] team0 (unregistering): Port device team_slave_1 removed [ 265.815964][ T5317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.826341][ T5317] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 265.850654][ T5317] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.861970][ T5317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.870015][ T5317] usb 4-1: SerialNumber: syz [ 265.932299][ T35] team0 (unregistering): Port device team_slave_0 removed [ 266.176281][ T5317] usb 3-1: USB disconnect, device number 7 [ 266.903418][ T29] audit: type=1400 audit(1725310485.931:450): avc: denied { setopt } for pid=6977 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.998933][ T29] audit: type=1400 audit(1725310486.011:451): avc: denied { ioctl } for pid=6977 comm="syz.2.320" path="socket:[12899]" dev="sockfs" ino=12899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.066522][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.101028][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.161249][ T29] audit: type=1400 audit(1725310486.161:452): avc: denied { connect } for pid=6977 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 267.197468][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.211850][ T29] audit: type=1400 audit(1725310486.161:453): avc: denied { name_connect } for pid=6977 comm="syz.2.320" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 267.480166][ T6821] hsr_slave_0: entered promiscuous mode [ 267.538715][ T6821] hsr_slave_1: entered promiscuous mode [ 267.631871][ T6670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 267.814309][ T5288] usb 4-1: USB disconnect, device number 2 [ 267.841972][ T4619] Bluetooth: hci4: sending frame failed (-49) [ 267.860730][ T5249] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 267.900473][ T6670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.992326][ T6670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.170332][ T6670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.518698][ T7008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.038654][ T29] audit: type=1400 audit(1725310488.061:454): avc: denied { getopt } for pid=7018 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 269.139766][ T29] audit: type=1400 audit(1725310488.161:455): avc: denied { write } for pid=7018 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.186108][ T29] audit: type=1400 audit(1725310488.161:456): avc: denied { ioctl } for pid=7018 comm="syz.3.326" path="socket:[13012]" dev="sockfs" ino=13012 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 269.216523][ T29] audit: type=1400 audit(1725310488.161:457): avc: denied { bind } for pid=7018 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.451075][ T29] audit: type=1400 audit(1725310488.641:458): avc: denied { associate } for pid=7024 comm="syz.3.327" name="1" dev="devpts" ino=4 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 270.608038][ T6670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.877935][ T6670] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.057006][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.064928][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.123227][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.130406][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.632045][ T6821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.715271][ T6821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.905129][ T6821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.920048][ T6821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.717476][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 274.574439][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.819275][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.104132][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.111365][ T2511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.862207][ T29] audit: type=1400 audit(1725310494.231:459): avc: denied { setopt } for pid=7071 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 276.070722][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.077978][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.281764][ T6670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.621981][ T6670] veth0_vlan: entered promiscuous mode [ 276.669385][ T6670] veth1_vlan: entered promiscuous mode [ 276.768888][ T29] audit: type=1400 audit(1725310495.791:460): avc: denied { append } for pid=7090 comm="syz.2.337" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 276.853729][ T6670] veth0_macvtap: entered promiscuous mode [ 276.870472][ T7098] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 276.916608][ T6670] veth1_macvtap: entered promiscuous mode [ 276.966479][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.016342][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.040311][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.065904][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.094508][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.114056][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.144373][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.202862][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.235573][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.256152][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.277590][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.305141][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.359482][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.399467][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.457142][ T6670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.479117][ T6670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.511869][ T6670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.520621][ T6670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.748786][ T7110] input: syz1 as /devices/virtual/input/input7 [ 277.849511][ T29] audit: type=1400 audit(1725310496.871:461): avc: denied { map } for pid=7113 comm="syz.3.340" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.850802][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.004563][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.033400][ T29] audit: type=1400 audit(1725310498.061:462): avc: denied { shutdown } for pid=7124 comm="syz.4.342" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.062813][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.159496][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.201445][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.218403][ T6821] veth0_vlan: entered promiscuous mode [ 279.302375][ T7133] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 279.888335][ T29] audit: type=1400 audit(1725310498.341:463): avc: denied { write } for pid=7128 comm="syz.2.343" path="socket:[14528]" dev="sockfs" ino=14528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.110447][ T6821] veth1_vlan: entered promiscuous mode [ 281.174185][ T6821] veth0_macvtap: entered promiscuous mode [ 281.244483][ T6821] veth1_macvtap: entered promiscuous mode [ 281.514236][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.568577][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.578578][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.590166][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.610999][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.634373][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.888850][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.309517][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.373411][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.493806][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.531085][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.601159][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.685672][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.685701][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.685721][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.685740][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.685758][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.687860][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.733425][ T6821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.733474][ T6821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.733514][ T6821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.733552][ T6821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.999478][ T29] audit: type=1400 audit(1725310502.011:464): avc: denied { create } for pid=7144 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 283.676918][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.696296][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.802179][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 283.860350][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 284.033294][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.043350][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 284.055700][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.230278][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.352'. [ 286.072544][ T7212] overlayfs: missing 'lowerdir' [ 287.891488][ T29] audit: type=1400 audit(1725310505.081:465): avc: denied { watch } for pid=7198 comm="syz.0.353" path="/1/net_prio.prioidx" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.196290][ T29] audit: type=1400 audit(1725310505.081:466): avc: denied { watch_sb } for pid=7198 comm="syz.0.353" path="/1/net_prio.prioidx" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 294.531073][ T29] audit: type=1400 audit(1725310513.411:467): avc: denied { setopt } for pid=7236 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 295.603936][ T29] audit: type=1400 audit(1725310514.631:468): avc: denied { setopt } for pid=7237 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.421793][ T7242] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.692384][ T29] audit: type=1400 audit(1725310515.691:469): avc: denied { create } for pid=7252 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.798484][ T29] audit: type=1400 audit(1725310515.711:470): avc: denied { bind } for pid=7252 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.858949][ T29] audit: type=1400 audit(1725310515.721:471): avc: denied { connect } for pid=7252 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.878882][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.293291][ T746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.907946][ T4619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.924818][ T4619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.924956][ T746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.952520][ T4619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.973996][ T29] audit: type=1400 audit(1725310516.981:472): avc: denied { map } for pid=7273 comm="syz.4.367" path="socket:[14880]" dev="sockfs" ino=14880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 298.020573][ T4619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.035677][ T4619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 298.045480][ T4619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.250989][ T29] audit: type=1326 audit(1725310517.271:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c579eb9 code=0x7ffc0000 [ 298.255861][ T29] audit: type=1326 audit(1725310517.271:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c579eb9 code=0x7ffc0000 [ 298.255932][ T29] audit: type=1326 audit(1725310517.281:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd47c579eb9 code=0x7ffc0000 [ 298.255991][ T29] audit: type=1326 audit(1725310517.281:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c579eb9 code=0x7ffc0000 [ 298.256051][ T29] audit: type=1326 audit(1725310517.281:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c579eb9 code=0x7ffc0000 [ 298.256110][ T29] audit: type=1326 audit(1725310517.281:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd47c579eb9 code=0x7ffc0000 [ 298.329038][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.280971][ T746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.332418][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.468039][ T7283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.322015][ T4619] Bluetooth: hci4: command tx timeout [ 300.330788][ T746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.276369][ T7274] chnl_net:caif_netlink_parms(): no params data found [ 301.338258][ T7293] 9pnet: Found fid 0 not clunked [ 301.358433][ T746] bridge_slave_1: left allmulticast mode [ 301.433615][ T746] bridge_slave_1: left promiscuous mode [ 301.474067][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.528156][ T746] bridge_slave_0: left allmulticast mode [ 301.568831][ T746] bridge_slave_0: left promiscuous mode [ 301.671325][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.818692][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 301.818711][ T29] audit: type=1400 audit(1725310520.841:516): avc: denied { map } for pid=7320 comm="syz.2.375" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.847784][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.978202][ T29] audit: type=1400 audit(1725310520.881:517): avc: denied { execute } for pid=7320 comm="syz.2.375" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 302.114647][ T29] audit: type=1400 audit(1725310520.911:518): avc: denied { setopt } for pid=7320 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.343887][ T4619] Bluetooth: hci4: command tx timeout [ 304.442691][ T29] audit: type=1400 audit(1725310523.421:519): avc: denied { bind } for pid=7342 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.491562][ T4619] Bluetooth: hci4: command tx timeout [ 304.756567][ T29] audit: type=1400 audit(1725310523.431:520): avc: denied { write } for pid=7342 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.230808][ T7359] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.381'. [ 305.396538][ T746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.423774][ T746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.464663][ T746] bond0 (unregistering): Released all slaves [ 305.883035][ T29] audit: type=1400 audit(1725310524.901:521): avc: denied { read } for pid=7364 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.501362][ T4619] Bluetooth: hci4: command tx timeout [ 307.620076][ T29] audit: type=1400 audit(1725310526.641:522): avc: denied { read } for pid=7369 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 307.858404][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.867839][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.901251][ T7274] bridge_slave_0: entered allmulticast mode [ 307.953070][ T7274] bridge_slave_0: entered promiscuous mode [ 308.029273][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.061114][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.111286][ T7274] bridge_slave_1: entered allmulticast mode [ 308.155645][ T7274] bridge_slave_1: entered promiscuous mode [ 310.801084][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.875243][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.981963][ T746] hsr_slave_0: left promiscuous mode [ 311.018757][ T746] hsr_slave_1: left promiscuous mode [ 311.057087][ T746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.088961][ T746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.132150][ T746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.173275][ T746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.342873][ T746] veth1_macvtap: left promiscuous mode [ 311.366639][ T746] veth0_macvtap: left promiscuous mode [ 311.383824][ T746] veth1_vlan: left promiscuous mode [ 311.428904][ T746] veth0_vlan: left promiscuous mode [ 314.419603][ T746] team0 (unregistering): Port device team_slave_1 removed [ 314.513196][ T746] team0 (unregistering): Port device team_slave_0 removed [ 314.619933][ T29] audit: type=1400 audit(1725310533.641:523): avc: denied { read } for pid=7439 comm="syz.0.395" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.654775][ T29] audit: type=1400 audit(1725310533.641:524): avc: denied { open } for pid=7439 comm="syz.0.395" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.687322][ T29] audit: type=1400 audit(1725310533.641:525): avc: denied { write } for pid=7439 comm="syz.0.395" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 315.559788][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 315.680441][ T7274] team0: Port device team_slave_0 added [ 315.797765][ T7274] team0: Port device team_slave_1 added [ 315.997348][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.007722][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.036090][ T7274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.083250][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.123351][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.171428][ T7274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.549810][ T7274] hsr_slave_0: entered promiscuous mode [ 316.572395][ T7274] hsr_slave_1: entered promiscuous mode [ 316.588526][ T7274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.606525][ T7274] Cannot create hsr debugfs directory [ 317.717270][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.674238][ T29] audit: type=1400 audit(1725310539.700:526): avc: denied { remount } for pid=7472 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 319.785831][ T29] audit: type=1400 audit(1725310539.810:527): avc: denied { read } for pid=7472 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.845223][ T29] audit: type=1326 audit(1725310539.870:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 319.982257][ T29] audit: type=1326 audit(1725310539.890:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 320.121283][ T29] audit: type=1326 audit(1725310539.900:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 320.228275][ T29] audit: type=1326 audit(1725310539.900:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 321.263183][ T29] audit: type=1326 audit(1725310539.900:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 321.685521][ T29] audit: type=1326 audit(1725310539.900:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 321.709974][ T29] audit: type=1326 audit(1725310539.900:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84db179eb9 code=0x7ffc0000 [ 322.150790][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 322.162097][ T7503] NILFS (nullb0): couldn't find nilfs on the device [ 322.163239][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 322.209979][ T29] audit: type=1400 audit(1725310539.900:535): avc: denied { connect } for pid=7472 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 322.230516][ T7274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.434074][ T7274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.569308][ T7274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.782152][ T7274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.525152][ T7522] delete_channel: no stack [ 325.899668][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.064321][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.153997][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.161199][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.401654][ T7544] block device autoloading is deprecated and will be removed. [ 326.452545][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.459699][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.069605][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 330.069677][ T29] audit: type=1400 audit(1725310550.090:587): avc: denied { ioctl } for pid=7566 comm="syz.0.423" path="socket:[16455]" dev="sockfs" ino=16455 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 330.116454][ T7567] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 330.306656][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.504788][ T7274] veth0_vlan: entered promiscuous mode [ 330.549858][ T7274] veth1_vlan: entered promiscuous mode [ 330.782142][ T7274] veth0_macvtap: entered promiscuous mode [ 330.834236][ T7274] veth1_macvtap: entered promiscuous mode [ 330.985870][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.021419][ T29] audit: type=1400 audit(1725310551.040:588): avc: denied { view } for pid=7587 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 331.061072][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.101741][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.198484][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.229774][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.269540][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.318519][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.367544][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.436861][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.577226][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.634450][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.710076][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.506795][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.530363][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.617011][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.795575][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.192441][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.738868][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.603593][ T7274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.701032][ T7274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.732237][ T7274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.771304][ T7274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.623668][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.689577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.888512][ T2511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.942140][ T2511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.138732][ T7603] syz.4.428 (7603): drop_caches: 2 [ 338.314353][ T7601] syz.4.428 (7601): drop_caches: 2 [ 338.512017][ T7636] xt_limit: Overflow, try lower: 1207959552/384 [ 338.844736][ T29] audit: type=1400 audit(1725310558.870:589): avc: denied { ioctl } for pid=7638 comm="syz.4.438" path="socket:[16765]" dev="sockfs" ino=16765 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 339.552563][ T5285] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 339.980206][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 342.548469][ T5285] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.565518][ T5285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.588154][ T5285] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.606610][ T5285] usb 1-1: config 1 has no interface number 1 [ 342.632210][ T5285] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 342.780232][ T5285] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.905900][ T5285] usb 1-1: config 1 interface 2 has no altsetting 0 [ 343.027398][ T5285] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.064513][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.104256][ T5285] usb 1-1: Product: syz [ 343.120971][ T5285] usb 1-1: Manufacturer: syz [ 343.143659][ T5285] usb 1-1: SerialNumber: syz [ 343.706569][ T7662] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.212211][ T7666] syz.2.445 uses obsolete (PF_INET,SOCK_PACKET) [ 344.387701][ T7668] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 80 [ 344.606713][ T29] audit: type=1400 audit(1725310564.630:590): avc: denied { watch } for pid=7667 comm="syz.3.446" path="/105/file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 344.929630][ T5285] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 344.961306][ T5285] usb 1-1: 2:1 : format type 39 is not supported yet [ 345.058321][ T5285] usb 1-1: selecting invalid altsetting 0 [ 345.287119][ T5285] usb 1-1: USB disconnect, device number 9 [ 345.909359][ T7678] udevd[7678]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.648259][ T29] audit: type=1400 audit(1725310567.666:591): avc: denied { read } for pid=7691 comm="syz.1.450" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 348.165594][ T29] audit: type=1400 audit(1725310567.666:592): avc: denied { open } for pid=7691 comm="syz.1.450" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 348.211139][ T29] audit: type=1400 audit(1725310568.096:593): avc: denied { ioctl } for pid=7691 comm="syz.1.450" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 348.731495][ T942] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 348.983054][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 349.651029][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 349.838422][ T942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 349.946963][ T942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 349.967238][ T942] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.070417][ T942] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 350.103181][ T942] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 350.135336][ T942] usb 4-1: Product: syz [ 350.149596][ T942] usb 4-1: Manufacturer: syz [ 350.172778][ T942] usb 4-1: SerialNumber: syz [ 350.231457][ T7704] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 350.284268][ T942] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 350.330203][ T29] audit: type=1400 audit(1725310570.346:594): avc: denied { create } for pid=7724 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 351.874918][ T942] usb 4-1: USB disconnect, device number 3 [ 353.727867][ T942] appletouch 4-1:1.0: input: appletouch disconnected [ 353.979574][ T29] audit: type=1326 audit(1725310573.996:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.3.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84db179eb9 code=0x0 [ 358.593663][ T7784] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.476'. [ 358.640847][ T25] IPVS: starting estimator thread 0... [ 358.761062][ T7787] IPVS: using max 22 ests per chain, 52800 per kthread [ 358.807371][ T7788] netlink: 'syz.4.476': attribute type 2 has an invalid length. [ 362.601167][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 362.974853][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 362.994152][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.396655][ T25] usb 5-1: string descriptor 0 read error: -22 [ 363.422594][ T25] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 363.469734][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.721923][ T7815] syz.2.484(7815): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 363.820867][ T25] usb 5-1: config 0 descriptor?? [ 364.435252][ T7812] dlm: non-version read from control device 0 [ 364.529979][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 366.147975][ T25] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 366.150398][ T4619] Bluetooth: hci2: command 0x0406 tx timeout [ 366.159750][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 366.199597][ T25] dib0700: firmware download failed at 7 with -22 [ 366.375947][ T25] usb 5-1: USB disconnect, device number 5 [ 366.778435][ T7850] tipc: Started in network mode [ 366.791943][ T7850] tipc: Node identity aa60a20d6263, cluster identity 4711 [ 366.800765][ T7850] tipc: Enabled bearer , priority 0 [ 366.876433][ T7850] syzkaller0: MTU too low for tipc bearer [ 366.889746][ T7850] tipc: Disabling bearer [ 368.799418][ T7865] vivid-000: disconnect [ 368.842561][ T7865] vivid-000: reconnect [ 369.219317][ T7876] tipc: Started in network mode [ 369.507609][ T29] audit: type=1400 audit(1725310589.486:596): avc: denied { watch watch_reads } for pid=7878 comm="syz.0.497" path="/proc/113" dev="proc" ino=17913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 370.064619][ T7876] tipc: Node identity 2007ff, cluster identity 4711 [ 370.081363][ T7876] tipc: Node number set to 2099199 [ 370.144230][ T29] audit: type=1400 audit(1725310590.166:597): avc: denied { map } for pid=7881 comm="syz.2.498" path="/dev/sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 372.357972][ T7896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.445998][ T29] audit: type=1400 audit(1725310593.386:598): avc: denied { listen } for pid=7906 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.147648][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.969173][ T29] audit: type=1400 audit(1725310605.366:599): avc: denied { watch watch_reads } for pid=7969 comm="syz.4.521" path="/82" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 386.338080][ T5249] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 386.426733][ T29] audit: type=1400 audit(1725310606.426:600): avc: denied { unmount } for pid=6821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 387.294951][ T29] audit: type=1400 audit(1725310607.316:601): avc: denied { open } for pid=7976 comm="syz.2.524" path="/dev/ptyq9" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 387.386733][ T29] audit: type=1400 audit(1725310607.406:602): avc: denied { ioctl } for pid=7976 comm="syz.2.524" path="/dev/ptyq9" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 387.476876][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 387.583096][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 389.541443][ T5249] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 389.549481][ T4619] Bluetooth: hci5: command 0x1003 tx timeout [ 390.341357][ T8016] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 390.341521][ T8016] Bluetooth: hci2: Injecting HCI hardware error event [ 390.344251][ T5235] Bluetooth: hci2: hardware error 0x00 [ 392.451277][ T5235] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 392.960195][ T8045] cannot load conntrack support for proto=3 [ 392.987829][ T29] audit: type=1400 audit(1725310613.006:603): avc: denied { ioctl } for pid=8038 comm="syz.4.539" path="socket:[18144]" dev="sockfs" ino=18144 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 393.745431][ T29] audit: type=1400 audit(1725310613.756:604): avc: denied { connect } for pid=8034 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.538689][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 394.645378][ C0] ------------[ cut here ]------------ [ 394.651549][ C0] WARNING: CPU: 0 PID: 8057 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 394.662564][ C0] Modules linked in: [ 394.666526][ C0] CPU: 0 UID: 0 PID: 8057 Comm: syz.2.544 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 394.677199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 394.687300][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 394.694358][ C0] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 0a 57 94 f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 fc 56 94 f6 90 0f 0b 90 e9 df f0 ff ff [ 394.714108][ C0] RSP: 0018:ffffc90000007408 EFLAGS: 00010246 [ 394.720167][ C0] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8af75be2 [ 394.728180][ C0] RDX: ffff88802fb2bc00 RSI: ffffffff8af76946 RDI: 0000000000000004 [ 394.736202][ C0] RBP: ffffc90000007528 R08: 0000000000000004 R09: 00000000000081e5 [ 394.744261][ C0] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff8880639c31e8 [ 394.752280][ C0] R13: 0000000000000000 R14: ffff8880639c3100 R15: dffffc0000000000 [ 394.760265][ C0] FS: 00007fd47d3796c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 394.769248][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.775851][ C0] CR2: 0000000020100000 CR3: 0000000061bb2000 CR4: 00000000003506f0 [ 394.783863][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.791856][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.799830][ C0] Call Trace: [ 394.803127][ C0] [ 394.805990][ C0] ? show_regs+0x8c/0xa0 [ 394.810246][ C0] ? __warn+0xe5/0x3c0 [ 394.814333][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 394.820770][ C0] ? report_bug+0x3c0/0x580 [ 394.825293][ C0] ? handle_bug+0x3d/0x70 [ 394.829631][ C0] ? exc_invalid_op+0x17/0x50 [ 394.834325][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 394.839349][ C0] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 394.845703][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 394.852138][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 394.858555][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 394.865009][ C0] mptcp_data_ready+0x30e/0x8e0 [ 394.869865][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 394.875281][ C0] subflow_data_ready+0x51d/0x7d0 [ 394.880312][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 394.885881][ C0] ? __pfx_tcp_grow_window+0x10/0x10 [ 394.891190][ C0] tcp_data_ready+0x146/0x5b0 [ 394.895944][ C0] ? tcp_event_data_recv+0xb6e/0x1410 [ 394.901442][ C0] ? __pfx_tcp_data_ready+0x10/0x10 [ 394.906680][ C0] tcp_data_queue+0x1a6f/0x5280 [ 394.911550][ C0] ? tcp_urg+0x110/0xb80 [ 394.915792][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 394.921003][ C0] ? tcp_send_dupack+0x7f0/0x810 [ 394.925942][ C0] ? ktime_get+0xfb/0x1a0 [ 394.930268][ C0] tcp_rcv_established+0x8b1/0x21c0 [ 394.935480][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 394.940552][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 394.945963][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 394.951624][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 394.956648][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 394.961863][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 394.966456][ C0] tcp_v4_rcv+0x33a8/0x4390 [ 394.971009][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 394.975860][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 394.981362][ C0] ? read_tsc+0x9/0x20 [ 394.985459][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 394.991202][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 394.996049][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 395.001446][ C0] ip_local_deliver_finish+0x316/0x570 [ 395.006907][ C0] ip_local_deliver+0x18e/0x1f0 [ 395.011790][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 395.017159][ C0] ip_rcv+0x2c5/0x5d0 [ 395.021160][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 395.025656][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 395.031616][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 395.038024][ C0] ? process_backlog+0x3f1/0x15f0 [ 395.043061][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.048086][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.052868][ C0] ? process_backlog+0x3f1/0x15f0 [ 395.057885][ C0] __netif_receive_skb+0x1d/0x160 [ 395.062927][ C0] process_backlog+0x443/0x15f0 [ 395.067781][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 395.073195][ C0] net_rx_action+0xa92/0x1010 [ 395.077876][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 395.083001][ C0] ? __pfx_mark_lock+0x10/0x10 [ 395.087774][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 395.092996][ C0] ? sched_clock+0x38/0x60 [ 395.097415][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 395.102295][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.107064][ C0] handle_softirqs+0x216/0x8f0 [ 395.111874][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 395.117153][ C0] ? __dev_queue_xmit+0x86d/0x4300 [ 395.122281][ C0] do_softirq+0xb2/0xf0 [ 395.126431][ C0] [ 395.129353][ C0] [ 395.132294][ C0] __local_bh_enable_ip+0x100/0x120 [ 395.137482][ C0] ? __dev_queue_xmit+0x86d/0x4300 [ 395.142603][ C0] __dev_queue_xmit+0x882/0x4300 [ 395.147538][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 395.152589][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 395.157971][ C0] ? __pfx_hlock_class+0x10/0x10 [ 395.162922][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 395.168115][ C0] ? selinux_ip_postroute+0x6fb/0xda0 [ 395.173613][ C0] ? __pfx_mark_lock+0x10/0x10 [ 395.178469][ C0] ? find_held_lock+0x2d/0x110 [ 395.183354][ C0] ? __ip_finish_output+0x49e/0x950 [ 395.188563][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.193624][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.198391][ C0] ip_finish_output2+0x16fe/0x25e0 [ 395.203538][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 395.209104][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 395.213982][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 395.219206][ C0] __ip_finish_output+0x49e/0x950 [ 395.224252][ C0] ip_finish_output+0x31/0x310 [ 395.229016][ C0] ip_output+0x13b/0x2a0 [ 395.233276][ C0] ? __pfx_ip_output+0x10/0x10 [ 395.238039][ C0] ip_local_out+0x33e/0x4a0 [ 395.242553][ C0] __ip_queue_xmit+0x747/0x1940 [ 395.247407][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 395.252528][ C0] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 395.257730][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 395.263291][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 395.268670][ C0] tcp_write_xmit+0x809d/0x8490 [ 395.273551][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 395.279091][ C0] tcp_rcv_established+0x93a/0x21c0 [ 395.284322][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 395.289949][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.295009][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 395.299594][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 395.304718][ C0] __release_sock+0x31b/0x400 [ 395.309397][ C0] ? tcp_push+0x221/0x6f0 [ 395.313741][ C0] release_sock+0x5a/0x220 [ 395.318154][ C0] __mptcp_push_pending+0x400/0x560 [ 395.323363][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 395.329094][ C0] ? __virt_addr_valid+0x5e/0x590 [ 395.334130][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 395.340191][ C0] ? __phys_addr_symbol+0x30/0x80 [ 395.345225][ C0] ? __check_object_size+0x497/0x720 [ 395.350513][ C0] mptcp_sendmsg+0x1960/0x1f20 [ 395.355306][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 395.360419][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 395.365547][ C0] inet_sendmsg+0x119/0x140 [ 395.370046][ C0] __sys_sendto+0x42c/0x4e0 [ 395.374579][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 395.379605][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 395.384901][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.390112][ C0] ? __sys_connect+0xed/0x170 [ 395.395005][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 395.399768][ C0] ? do_syscall_64+0x91/0x250 [ 395.404468][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.409668][ C0] do_syscall_64+0xcd/0x250 [ 395.414192][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.420078][ C0] RIP: 0033:0x7fd47c579eb9 [ 395.424523][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.444146][ C0] RSP: 002b:00007fd47d379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 395.452580][ C0] RAX: ffffffffffffffda RBX: 00007fd47c716058 RCX: 00007fd47c579eb9 [ 395.460551][ C0] RDX: 0000000000100b20 RSI: 0000000020000040 RDI: 0000000000000006 [ 395.468543][ C0] RBP: 00007fd47c5e793e R08: 0000000000000000 R09: 0000000000000000 [ 395.476611][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.484592][ C0] R13: 0000000000000000 R14: 00007fd47c716058 R15: 00007fff3c6b1718 [ 395.492584][ C0] [ 395.495608][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.502872][ C0] CPU: 0 UID: 0 PID: 8057 Comm: syz.2.544 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 395.513446][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 395.523572][ C0] Call Trace: [ 395.526838][ C0] [ 395.529668][ C0] dump_stack_lvl+0x3d/0x1f0 [ 395.534275][ C0] panic+0x6dc/0x7c0 [ 395.538185][ C0] ? __pfx_panic+0x10/0x10 [ 395.542593][ C0] ? show_trace_log_lvl+0x363/0x500 [ 395.547794][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 395.552897][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 395.559313][ C0] check_panic_on_warn+0xab/0xb0 [ 395.564246][ C0] __warn+0xf1/0x3c0 [ 395.568134][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 395.574549][ C0] report_bug+0x3c0/0x580 [ 395.578888][ C0] handle_bug+0x3d/0x70 [ 395.583039][ C0] exc_invalid_op+0x17/0x50 [ 395.587545][ C0] asm_exc_invalid_op+0x1a/0x20 [ 395.592388][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 395.599417][ C0] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 0a 57 94 f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 fc 56 94 f6 90 0f 0b 90 e9 df f0 ff ff [ 395.619041][ C0] RSP: 0018:ffffc90000007408 EFLAGS: 00010246 [ 395.625101][ C0] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8af75be2 [ 395.633077][ C0] RDX: ffff88802fb2bc00 RSI: ffffffff8af76946 RDI: 0000000000000004 [ 395.641044][ C0] RBP: ffffc90000007528 R08: 0000000000000004 R09: 00000000000081e5 [ 395.649022][ C0] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff8880639c31e8 [ 395.656978][ C0] R13: 0000000000000000 R14: ffff8880639c3100 R15: dffffc0000000000 [ 395.664942][ C0] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 395.671270][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 395.677683][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 395.684107][ C0] mptcp_data_ready+0x30e/0x8e0 [ 395.689040][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 395.694415][ C0] subflow_data_ready+0x51d/0x7d0 [ 395.699442][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 395.704985][ C0] ? __pfx_tcp_grow_window+0x10/0x10 [ 395.710268][ C0] tcp_data_ready+0x146/0x5b0 [ 395.714933][ C0] ? tcp_event_data_recv+0xb6e/0x1410 [ 395.720298][ C0] ? __pfx_tcp_data_ready+0x10/0x10 [ 395.725492][ C0] tcp_data_queue+0x1a6f/0x5280 [ 395.730335][ C0] ? tcp_urg+0x110/0xb80 [ 395.734580][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 395.739783][ C0] ? tcp_send_dupack+0x7f0/0x810 [ 395.744731][ C0] ? ktime_get+0xfb/0x1a0 [ 395.749055][ C0] tcp_rcv_established+0x8b1/0x21c0 [ 395.754247][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 395.759263][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 395.764621][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 395.770249][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 395.775265][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 395.780641][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 395.785222][ C0] tcp_v4_rcv+0x33a8/0x4390 [ 395.789726][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 395.794570][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 395.800036][ C0] ? read_tsc+0x9/0x20 [ 395.804203][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 395.810023][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 395.814964][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 395.820350][ C0] ip_local_deliver_finish+0x316/0x570 [ 395.825811][ C0] ip_local_deliver+0x18e/0x1f0 [ 395.830656][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 395.836026][ C0] ip_rcv+0x2c5/0x5d0 [ 395.840004][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 395.844499][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 395.850385][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 395.856795][ C0] ? process_backlog+0x3f1/0x15f0 [ 395.861814][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.866835][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.871607][ C0] ? process_backlog+0x3f1/0x15f0 [ 395.876642][ C0] __netif_receive_skb+0x1d/0x160 [ 395.881676][ C0] process_backlog+0x443/0x15f0 [ 395.886530][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 395.891992][ C0] net_rx_action+0xa92/0x1010 [ 395.896673][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 395.901792][ C0] ? __pfx_mark_lock+0x10/0x10 [ 395.906567][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 395.911765][ C0] ? sched_clock+0x38/0x60 [ 395.916183][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 395.921040][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.925832][ C0] handle_softirqs+0x216/0x8f0 [ 395.930592][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 395.935871][ C0] ? __dev_queue_xmit+0x86d/0x4300 [ 395.940977][ C0] do_softirq+0xb2/0xf0 [ 395.945119][ C0] [ 395.948046][ C0] [ 395.950972][ C0] __local_bh_enable_ip+0x100/0x120 [ 395.956184][ C0] ? __dev_queue_xmit+0x86d/0x4300 [ 395.961286][ C0] __dev_queue_xmit+0x882/0x4300 [ 395.966303][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 395.971327][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 395.976704][ C0] ? __pfx_hlock_class+0x10/0x10 [ 395.981635][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 395.986844][ C0] ? selinux_ip_postroute+0x6fb/0xda0 [ 395.992206][ C0] ? __pfx_mark_lock+0x10/0x10 [ 395.996984][ C0] ? find_held_lock+0x2d/0x110 [ 396.001743][ C0] ? __ip_finish_output+0x49e/0x950 [ 396.006942][ C0] ? __pfx_lock_release+0x10/0x10 [ 396.011976][ C0] ? mark_held_locks+0x9f/0xe0 [ 396.016739][ C0] ip_finish_output2+0x16fe/0x25e0 [ 396.021854][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 396.027306][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 396.032170][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 396.037371][ C0] __ip_finish_output+0x49e/0x950 [ 396.042394][ C0] ip_finish_output+0x31/0x310 [ 396.047164][ C0] ip_output+0x13b/0x2a0 [ 396.051402][ C0] ? __pfx_ip_output+0x10/0x10 [ 396.056169][ C0] ip_local_out+0x33e/0x4a0 [ 396.060683][ C0] __ip_queue_xmit+0x747/0x1940 [ 396.065528][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 396.070627][ C0] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 396.075830][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 396.081377][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 396.086757][ C0] tcp_write_xmit+0x809d/0x8490 [ 396.091620][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 396.097179][ C0] tcp_rcv_established+0x93a/0x21c0 [ 396.102386][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 396.108018][ C0] ? __pfx_lock_release+0x10/0x10 [ 396.113080][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 396.117663][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 396.122764][ C0] __release_sock+0x31b/0x400 [ 396.127460][ C0] ? tcp_push+0x221/0x6f0 [ 396.131783][ C0] release_sock+0x5a/0x220 [ 396.136197][ C0] __mptcp_push_pending+0x400/0x560 [ 396.141394][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 396.147123][ C0] ? __virt_addr_valid+0x5e/0x590 [ 396.152140][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 396.158202][ C0] ? __phys_addr_symbol+0x30/0x80 [ 396.163216][ C0] ? __check_object_size+0x497/0x720 [ 396.168498][ C0] mptcp_sendmsg+0x1960/0x1f20 [ 396.173263][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 396.178379][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 396.183483][ C0] inet_sendmsg+0x119/0x140 [ 396.187977][ C0] __sys_sendto+0x42c/0x4e0 [ 396.192476][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 396.197492][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 396.202776][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.207977][ C0] ? __sys_connect+0xed/0x170 [ 396.212666][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 396.217424][ C0] ? do_syscall_64+0x91/0x250 [ 396.222101][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.227292][ C0] do_syscall_64+0xcd/0x250 [ 396.231794][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.237674][ C0] RIP: 0033:0x7fd47c579eb9 [ 396.242076][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.261675][ C0] RSP: 002b:00007fd47d379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 396.270079][ C0] RAX: ffffffffffffffda RBX: 00007fd47c716058 RCX: 00007fd47c579eb9 [ 396.278037][ C0] RDX: 0000000000100b20 RSI: 0000000020000040 RDI: 0000000000000006 [ 396.285993][ C0] RBP: 00007fd47c5e793e R08: 0000000000000000 R09: 0000000000000000 [ 396.293951][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.301910][ C0] R13: 0000000000000000 R14: 00007fd47c716058 R15: 00007fff3c6b1718 [ 396.309881][ C0] [ 396.313004][ C0] Kernel Offset: disabled [ 396.317450][ C0] Rebooting in 86400 seconds..