last executing test programs: 3m13.166427714s ago: executing program 4 (id=10): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x200000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x6, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}, {0x7fff, 0x80, 0xfe, 0x3}, {0xa7, 0xe, 0x80}, {0x9, 0x6, 0x5, 0xb}, {0x6, 0x9, 0x3, 0x7}]}, 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r3}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000eebcf4e14e0a7914bacc41f2e96edcd9ed84f22be0494d9e34b1b59e8110d429d66f6d88d77401b2e0bfd277e5c711ff1fce2ce7c5c4bff0e85c3cf96c879d4c033f38b4faafc306", @ANYRESOCT=r4, @ANYRES16, @ANYBLOB="b5d8c25ddac8020ee27e0237419b502e70e78b9611e6e484f04c346668558e032c6d402e68c2be76aabb8c2c49667ddde85928a3855826e9062cd990f832d00791ca53e7cac6702d5397cfcbaeaa382dc3f130d5be9a0f15bd0629e31d690042985d807d5af887e3555bf944f7ea96d1998d21730394017dfa060a34645621123509971899b078aeb53e8a7e4e6b865d2c5e5ade", @ANYRES16], 0xffffff77}}, 0x4020010) connect$inet(r4, &(0x7f0000003580)={0x2, 0x4e22, @dev}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000000), &(0x7f0000002e40)=""/4109, 0x1011}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}}, 0x0) 3m5.830583172s ago: executing program 2 (id=18): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702c1ffe80000000000000ffffa1dce408db9d"], 0xffdd) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) 3m5.438885189s ago: executing program 4 (id=20): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000480)=[@decrefs], 0x0, 0x0, 0x0}) execve(0x0, 0x0, &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xe6\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8s_\xfb\x00\x00\x00']) open(0x0, 0x2000, 0x0) 3m3.333107454s ago: executing program 4 (id=24): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@iter={&(0x7f0000000300)=@task={r1, r1}, 0x10}}, 0x40) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0xb, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 3m2.281418486s ago: executing program 4 (id=25): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 25.772188076s ago: executing program 0 (id=226): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@iter={&(0x7f0000000300)=@task={r0, r0}, 0x10}}, 0x40) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0xb, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) 24.728707048s ago: executing program 0 (id=227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x30000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'none\x00', 0x3e}, 0x2c) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x58, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "869388", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x20, 0x0, [@rand_addr=' \x01\x00', @mcast1]}]}}}}}}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000000, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0, 0x7}, 0x90) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x103382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 11.98303936s ago: executing program 3 (id=239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000002002020"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) 11.614955584s ago: executing program 3 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'xfrm0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$peeksig(0x4209, r3, &(0x7f0000000500)={0x3, 0x1}, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team_slave_0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=r4, @ANYBLOB="0100008000000000000003000000"], 0x14}}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) socket$key(0xf, 0x3, 0x2) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5409, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000540)={{@host, 0xa3c}, {@local, 0x8000000}, 0xfffffffffffffd66, "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"}, 0x418}) socket$nl_route(0x10, 0x3, 0x0) 8.600797369s ago: executing program 1 (id=243): r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640), 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) r2 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffedc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYRESHEX, @ANYRESDEC=r2], 0x94}, 0x1, 0x0, 0x0, 0x400c000}, 0x8800) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_clone3(0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$char_usb(r5, &(0x7f00000000c0)=""/28, 0x1c) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01ed1934cb02ef3b310001000000000000000b0000000003001473797a3000000000"], 0x28}}, 0x0) 6.967085089s ago: executing program 1 (id=244): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 6.707977701s ago: executing program 3 (id=245): r0 = socket$alg(0x26, 0x5, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200), 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)) sendto$packet(r8, &(0x7f0000001880), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.488054851s ago: executing program 1 (id=246): socket(0x1, 0x0, 0x0) r0 = msgget(0x2, 0x217) semop(r0, &(0x7f0000000400), 0x0) r1 = msgget(0x0, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000440)={{0x1}}) msgrcv(0x0, &(0x7f0000000540), 0x26, 0x2, 0x0) msgctl$IPC_INFO(r1, 0x3, 0x0) r2 = msgget$private(0x0, 0x8) msgsnd(r2, &(0x7f0000001680)={0x3, "d12247eea4a51cdea075fd2d72ff5bd1b3a466f79928df6aee1b400b562461191fee947714613102b391316f9d2cd12b2cab79506e413b50a10769118091509842ed2d3e21663339ac68c7e5f482f60d7e37da027e58805d318621516da55a7321263fe5cf3a34e5115fc4385468db8c530f0ad3ef13669783ccd2f76517f6acc1cb31090c72245ad596265be9e3160625c8707a7e3398c7e0ddc040551361688de805690a9ec000e25737d557505d2147d7fa27ae3c9be2a18f984f5dff114079f03091edb2464a611e2f9bb95ccaf3392b05e6ed3584922e678eb8a11e1d9426b0e431312e3c8d00316afb1ff33af2d967559a04807755725d"}, 0x102, 0x0) r3 = msgget$private(0x0, 0x520) msgrcv(r2, &(0x7f00000017c0)={0x0, ""/75}, 0x53, 0x0, 0x2000) r4 = msgget$private(0x0, 0x6) msgsnd(r4, &(0x7f0000001840)=ANY=[@ANYRES64=r2], 0xaf, 0x800) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000280)=""/125) r5 = semget(0x0, 0x4, 0x312) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000680)=""/4096) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000000c0)) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r7, 0x3, 0x0) 5.972808465s ago: executing program 2 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10) accept(r1, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x37}, 0x20) r4 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) 4.668946652s ago: executing program 2 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) unshare(0x8040480) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r2}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 4.535969944s ago: executing program 1 (id=249): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, &(0x7f0000000080)) 4.257400775s ago: executing program 4 (id=40): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x200000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x6, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}, {0x7fff, 0x80, 0xfe, 0x3}, {0xa7, 0xe, 0x80}, {0x9, 0x6, 0x5, 0xb}, {0x6, 0x9, 0x3, 0x7}]}, 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r3}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000eebcf4e14e0a7914bacc41f2e96edcd9ed84f22be0494d9e34b1b59e8110d429d66f6d88d77401b2e0bfd277e5c711ff1fce2ce7c5c4bff0e85c3cf96c879d4c033f38b4faafc3061df67158", @ANYRESOCT=r4, @ANYRES16, @ANYBLOB="b5d8c25ddac8020ee27e0237419b502e70e78b9611e6e484f04c346668558e032c6d402e68c2be76aabb8c2c49667ddde85928a3855826e9062cd990f832d00791ca53e7cac6702d5397cfcbaeaa382dc3f130d5be9a0f15bd0629e31d690042985d807d5af887e3555bf944f7ea96d1998d21730394017dfa060a34645621123509971899b078aeb53e8a7e4e6b865d2c5e5ade", @ANYRES16], 0xffffff77}}, 0x4020010) connect$inet(r4, &(0x7f0000003580)={0x2, 0x4e22, @dev}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000000), &(0x7f0000002e40)=""/4109, 0x1011}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}}, 0x0) 3.226031413s ago: executing program 3 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x4, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.122431849s ago: executing program 1 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) 2.898398061s ago: executing program 2 (id=252): r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640), 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) r2 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffedc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYRESHEX, @ANYRESDEC=r2], 0x94}, 0x1, 0x0, 0x0, 0x400c000}, 0x8800) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_clone3(0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$char_usb(r5, &(0x7f00000000c0)=""/28, 0x1c) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01ed1934cb02ef3b310001000000000000000b0000000003001473797a3000000000"], 0x28}}, 0x0) 2.595349857s ago: executing program 3 (id=253): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 2.320803351s ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'xfrm0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$peeksig(0x4209, r3, &(0x7f0000000500)={0x3, 0x1}, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team_slave_0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=r4, @ANYBLOB="0100008000000000000003000000"], 0x14}}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) socket$key(0xf, 0x3, 0x2) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5409, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000540)={{@host, 0xa3c}, {@local, 0x8000000}, 0xfffffffffffffd66, "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"}, 0x418}) 1.610970954s ago: executing program 2 (id=255): syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r4, 0x4b6a, &(0x7f0000000080)={0x200d, 0x0, 0x0, 0x0, 0x0, "000000000000000066a4556100"}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0xae47, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.252324977s ago: executing program 4 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r4, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x18) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) r7 = epoll_create1(0x0) read$eventfd(r6, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000001480)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) 0s ago: executing program 2 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x74, 0x0, 0x0, 0x1}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0xe}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000010c0)={0x42, 0x40003}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x4}}, 0x10, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) unshare(0x2c060000) unshare(0x24020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffff771ffe72000000000008004503002c008a528c822f907864010101ffffffff0000883e0018907802070001000000002b23ca5ed97079e9e8ea60e03e4cbd66851f93314b08e0554c727dfca64febc3c9c79e4ba85f85ee8f5b70b7d85b12afcfc4250bed1b7468b304edc39532599d956574751ba31535dc9a971bf3d688f87d2b0d420c4984e2"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 97.608254][ T1188] cfg80211: failed to load regulatory.db [ 101.560010][ T30] audit: type=1400 audit(1725866200.289:88): avc: denied { mounton } for pid=5217 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 101.573188][ T5217] cgroup: Unknown subsys name 'net' [ 101.583021][ T30] audit: type=1400 audit(1725866200.299:89): avc: denied { mount } for pid=5217 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.610484][ T30] audit: type=1400 audit(1725866200.329:90): avc: denied { unmount } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.753130][ T5217] cgroup: Unknown subsys name 'rlimit' [ 101.962253][ T30] audit: type=1400 audit(1725866200.689:91): avc: denied { setattr } for pid=5217 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.986494][ T30] audit: type=1400 audit(1725866200.699:92): avc: denied { create } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.008210][ T30] audit: type=1400 audit(1725866200.699:93): avc: denied { write } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.030829][ T30] audit: type=1400 audit(1725866200.699:94): avc: denied { read } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.052583][ T30] audit: type=1400 audit(1725866200.729:95): avc: denied { read } for pid=4890 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 102.074574][ T30] audit: type=1400 audit(1725866200.729:96): avc: denied { mounton } for pid=5217 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.100546][ T30] audit: type=1400 audit(1725866200.749:97): avc: denied { mount } for pid=5217 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 102.156932][ T5222] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 104.008065][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.938305][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 106.938330][ T30] audit: type=1400 audit(1725866205.669:102): avc: denied { execmem } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.132285][ T30] audit: type=1400 audit(1725866206.849:103): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 108.198656][ T30] audit: type=1400 audit(1725866206.849:104): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.225322][ T30] audit: type=1400 audit(1725866206.849:105): avc: denied { create } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.257576][ T30] audit: type=1400 audit(1725866206.869:106): avc: denied { read write } for pid=5230 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.342545][ T30] audit: type=1400 audit(1725866206.869:107): avc: denied { open } for pid=5230 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.388270][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.414571][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.432919][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.435884][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.446562][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.456426][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.466274][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.472800][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.476181][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.480929][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.488356][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.505031][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.511859][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.513250][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.527096][ T4614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.529078][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.542148][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.543731][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.550482][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.556781][ T4614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.574683][ T4614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.575500][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.590633][ T4614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.590840][ T5248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.606643][ T4614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.639786][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.648057][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.665280][ T30] audit: type=1400 audit(1725866206.919:108): avc: denied { ioctl } for pid=5230 comm="syz-executor" path="socket:[3876]" dev="sockfs" ino=3876 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.682099][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.697817][ T30] audit: type=1400 audit(1725866207.339:109): avc: denied { read } for pid=5230 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.719182][ T30] audit: type=1400 audit(1725866207.339:110): avc: denied { open } for pid=5230 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.743275][ T30] audit: type=1400 audit(1725866207.339:111): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.767526][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.783389][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.563483][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 109.791642][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 109.814710][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 110.020800][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.029411][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.036996][ T5236] bridge_slave_0: entered allmulticast mode [ 110.045627][ T5236] bridge_slave_0: entered promiscuous mode [ 110.139379][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.146940][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.154393][ T5236] bridge_slave_1: entered allmulticast mode [ 110.162088][ T5236] bridge_slave_1: entered promiscuous mode [ 110.170237][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 110.233168][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.240398][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.247724][ T5241] bridge_slave_0: entered allmulticast mode [ 110.255923][ T5241] bridge_slave_0: entered promiscuous mode [ 110.303474][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.310806][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.318187][ T5241] bridge_slave_1: entered allmulticast mode [ 110.326493][ T5241] bridge_slave_1: entered promiscuous mode [ 110.335100][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 110.463743][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.470994][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.479193][ T5230] bridge_slave_0: entered allmulticast mode [ 110.488678][ T5230] bridge_slave_0: entered promiscuous mode [ 110.501783][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.516497][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.543770][ T5238] Bluetooth: hci0: command tx timeout [ 110.593452][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.600865][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.608903][ T5230] bridge_slave_1: entered allmulticast mode [ 110.617106][ T5230] bridge_slave_1: entered promiscuous mode [ 110.623737][ T5238] Bluetooth: hci1: command tx timeout [ 110.678181][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.702577][ T5240] Bluetooth: hci3: command tx timeout [ 110.708632][ T5238] Bluetooth: hci4: command tx timeout [ 110.757056][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.816808][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.831846][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.848798][ T5236] team0: Port device team_slave_0 added [ 110.870434][ T5238] Bluetooth: hci2: command tx timeout [ 110.948947][ T5236] team0: Port device team_slave_1 added [ 111.001483][ T5241] team0: Port device team_slave_0 added [ 111.068491][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.076143][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.084023][ T5231] bridge_slave_0: entered allmulticast mode [ 111.091750][ T5231] bridge_slave_0: entered promiscuous mode [ 111.103436][ T5241] team0: Port device team_slave_1 added [ 111.109870][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.117198][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.125165][ T5234] bridge_slave_0: entered allmulticast mode [ 111.133171][ T5234] bridge_slave_0: entered promiscuous mode [ 111.147067][ T5230] team0: Port device team_slave_0 added [ 111.162530][ T5230] team0: Port device team_slave_1 added [ 111.170291][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.177799][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.207830][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.220754][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.228703][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.236198][ T5231] bridge_slave_1: entered allmulticast mode [ 111.244737][ T5231] bridge_slave_1: entered promiscuous mode [ 111.271376][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.278953][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.286374][ T5234] bridge_slave_1: entered allmulticast mode [ 111.294919][ T5234] bridge_slave_1: entered promiscuous mode [ 111.344612][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.351593][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.378220][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.502122][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.510017][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.536618][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.552149][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.563701][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.570688][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.597688][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.612744][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.619738][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.645758][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.661762][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.687853][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.695207][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.721324][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.745594][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.809955][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.869302][ T5231] team0: Port device team_slave_0 added [ 111.881262][ T5231] team0: Port device team_slave_1 added [ 111.917156][ T5236] hsr_slave_0: entered promiscuous mode [ 111.925561][ T5236] hsr_slave_1: entered promiscuous mode [ 112.029940][ T5234] team0: Port device team_slave_0 added [ 112.065622][ T5230] hsr_slave_0: entered promiscuous mode [ 112.073607][ T5230] hsr_slave_1: entered promiscuous mode [ 112.080729][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.089740][ T5230] Cannot create hsr debugfs directory [ 112.164283][ T5234] team0: Port device team_slave_1 added [ 112.179006][ T5241] hsr_slave_0: entered promiscuous mode [ 112.186434][ T5241] hsr_slave_1: entered promiscuous mode [ 112.193769][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.201373][ T5241] Cannot create hsr debugfs directory [ 112.208425][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.216091][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.242814][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.352088][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.359266][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.387553][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.410892][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.417956][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.444852][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.510288][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.518485][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.545062][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.632265][ T5238] Bluetooth: hci0: command tx timeout [ 112.702608][ T5238] Bluetooth: hci1: command tx timeout [ 112.783029][ T5238] Bluetooth: hci4: command tx timeout [ 112.788523][ T5238] Bluetooth: hci3: command tx timeout [ 112.823182][ T5231] hsr_slave_0: entered promiscuous mode [ 112.830137][ T5231] hsr_slave_1: entered promiscuous mode [ 112.837488][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.845234][ T5231] Cannot create hsr debugfs directory [ 112.942449][ T5238] Bluetooth: hci2: command tx timeout [ 113.076411][ T5234] hsr_slave_0: entered promiscuous mode [ 113.083617][ T5234] hsr_slave_1: entered promiscuous mode [ 113.090261][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.099025][ T5234] Cannot create hsr debugfs directory [ 113.468819][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.487844][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.530279][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.588438][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.714469][ T5241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.731086][ T5241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.749500][ T5241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.766593][ T5241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.942551][ T5230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.957582][ T5230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.975351][ T5230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.021541][ T5230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.160379][ T5234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.204799][ T5234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.218430][ T5234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.235641][ T5234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.399808][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.469467][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.515970][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.533879][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.548814][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.605987][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.676479][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.684179][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.703025][ T5238] Bluetooth: hci0: command tx timeout [ 114.712909][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.783690][ T5238] Bluetooth: hci1: command tx timeout [ 114.820987][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.836128][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.843407][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.862707][ T5238] Bluetooth: hci4: command tx timeout [ 114.863695][ T5240] Bluetooth: hci3: command tx timeout [ 114.889325][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.943672][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.950883][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.988878][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.023130][ T5240] Bluetooth: hci2: command tx timeout [ 115.063099][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.070338][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.113018][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.120271][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.231419][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.238753][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.361091][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.438863][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 115.438887][ T30] audit: type=1400 audit(1725866214.159:113): avc: denied { sys_module } for pid=5236 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.499522][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.618527][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.631713][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.677377][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.684771][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.749705][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.757048][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.821449][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.828872][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.850601][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.857899][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.100650][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.131444][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.581341][ T5236] veth0_vlan: entered promiscuous mode [ 116.649313][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.730166][ T5236] veth1_vlan: entered promiscuous mode [ 116.792334][ T5240] Bluetooth: hci0: command tx timeout [ 116.862748][ T5240] Bluetooth: hci1: command tx timeout [ 116.943210][ T5240] Bluetooth: hci4: command tx timeout [ 116.945099][ T5238] Bluetooth: hci3: command tx timeout [ 116.991873][ T5236] veth0_macvtap: entered promiscuous mode [ 117.097925][ T5236] veth1_macvtap: entered promiscuous mode [ 117.112988][ T5238] Bluetooth: hci2: command tx timeout [ 117.137004][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.150194][ T5230] veth0_vlan: entered promiscuous mode [ 117.161721][ T5241] veth0_vlan: entered promiscuous mode [ 117.195808][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.218693][ T5230] veth1_vlan: entered promiscuous mode [ 117.248585][ T5241] veth1_vlan: entered promiscuous mode [ 117.276238][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.331415][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.359123][ T5230] veth0_macvtap: entered promiscuous mode [ 117.373198][ T5230] veth1_macvtap: entered promiscuous mode [ 117.446470][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.455975][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.467273][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.477034][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.539772][ T5234] veth0_vlan: entered promiscuous mode [ 117.556389][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.567491][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.582765][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.623694][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.634445][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.649522][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.699818][ T5241] veth0_macvtap: entered promiscuous mode [ 117.719338][ T5231] veth0_vlan: entered promiscuous mode [ 117.739542][ T5230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.750473][ T5230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.762374][ T5230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.771140][ T5230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.789296][ T5234] veth1_vlan: entered promiscuous mode [ 117.833877][ T5231] veth1_vlan: entered promiscuous mode [ 117.846628][ T5241] veth1_macvtap: entered promiscuous mode [ 117.931960][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.942655][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.954230][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.964855][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.977495][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.088236][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.099283][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.109241][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.120311][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.133662][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.165264][ T5231] veth0_macvtap: entered promiscuous mode [ 118.213559][ T5241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.223543][ T5241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.234717][ T5241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.244231][ T5241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.308316][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.327353][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.329261][ T5231] veth1_macvtap: entered promiscuous mode [ 118.368147][ T5234] veth0_macvtap: entered promiscuous mode [ 118.424918][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.432966][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.446059][ T5234] veth1_macvtap: entered promiscuous mode [ 118.536850][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.539859][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.555979][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.556033][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.574125][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.588902][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.598849][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.609458][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.621484][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.742308][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.750285][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.760677][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.761000][ T2570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.778285][ T30] audit: type=1400 audit(1725866217.479:114): avc: denied { mounton } for pid=5236 comm="syz-executor" path="/root/syzkaller.hjH2rl/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 118.807929][ T2570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.815539][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.825871][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.837625][ T30] audit: type=1400 audit(1725866217.479:115): avc: denied { mount } for pid=5236 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.855944][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.862662][ T30] audit: type=1400 audit(1725866217.529:116): avc: denied { mounton } for pid=5236 comm="syz-executor" path="/root/syzkaller.hjH2rl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.879854][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.909396][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.915106][ T30] audit: type=1400 audit(1725866217.529:117): avc: denied { mount } for pid=5236 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.936359][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.958306][ T30] audit: type=1400 audit(1725866217.579:118): avc: denied { unmount } for pid=5236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.977694][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.988187][ T30] audit: type=1400 audit(1725866217.659:119): avc: denied { mounton } for pid=5236 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.998143][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.018604][ T30] audit: type=1400 audit(1725866217.659:120): avc: denied { mount } for pid=5236 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.025377][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.057430][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.067386][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.077881][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.088211][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.100431][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.123386][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.174496][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.196264][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.208995][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.217841][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.295442][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.303791][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.309989][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.326662][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.336661][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.351784][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.370283][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.382365][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.393289][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.403975][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.418031][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.436412][ T5234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.447396][ T5234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.457003][ T5234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.466228][ T5234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.555360][ T30] audit: type=1400 audit(1725866218.269:121): avc: denied { read write } for pid=5236 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.693135][ T30] audit: type=1400 audit(1725866218.269:122): avc: denied { open } for pid=5236 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.790194][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 120.790219][ T30] audit: type=1400 audit(1725866219.499:135): avc: denied { create } for pid=5314 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.905213][ T30] audit: type=1400 audit(1725866219.559:136): avc: denied { create } for pid=5314 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.961352][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.971205][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.979624][ T30] audit: type=1400 audit(1725866219.659:137): avc: denied { execute } for pid=5314 comm="syz.1.2" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=7373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 121.135639][ T30] audit: type=1400 audit(1725866219.669:138): avc: denied { read write } for pid=5323 comm="syz.4.5" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.174220][ T30] audit: type=1400 audit(1725866219.669:139): avc: denied { open } for pid=5323 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.258438][ T30] audit: type=1400 audit(1725866219.669:140): avc: denied { ioctl } for pid=5323 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.308140][ T5280] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 121.357714][ T30] audit: type=1400 audit(1725866220.069:141): avc: denied { ioctl } for pid=5314 comm="syz.1.2" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6530 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.418105][ T2570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.451838][ T2570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.556384][ T5280] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 121.590479][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.625635][ T30] audit: type=1400 audit(1725866220.359:142): avc: denied { ioctl } for pid=5314 comm="syz.1.2" path="socket:[6484]" dev="sockfs" ino=6484 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.694310][ T5280] usb 5-1: config 0 descriptor?? [ 121.762785][ T5280] pwc: Samsung MPC-C10 USB webcam detected. [ 121.776002][ T30] audit: type=1400 audit(1725866220.499:143): avc: denied { create } for pid=5324 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.840028][ T2555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.840066][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.886413][ T2555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.887549][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.974164][ T30] audit: type=1400 audit(1725866220.709:144): avc: denied { connect } for pid=5324 comm="syz.3.6" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.023866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.173150][ T5280] pwc: send_video_command error -71 [ 122.178429][ T5280] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 122.186644][ T5280] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 122.292383][ T5280] usb 5-1: USB disconnect, device number 2 [ 123.102611][ T5299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.542068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 123.552877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.815783][ T5282] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.882632][ T5283] IPVS: starting estimator thread 0... [ 123.896742][ T5282] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.003345][ T5349] IPVS: using max 22 ests per chain, 52800 per kthread [ 124.021088][ T5282] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 124.028649][ T5343] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 124.170763][ T5299] usb 5-1: device descriptor read/all, error -71 [ 124.258889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.738880][ T5343] ALSA: seq fatal error: cannot create timer (-22) [ 126.235799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 126.474093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 126.614095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 126.626135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 126.772490][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 126.772515][ T30] audit: type=1400 audit(1725866225.479:172): avc: denied { ioctl } for pid=5338 comm="syz.0.1" path="socket:[7492]" dev="sockfs" ino=7492 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.971233][ T5347] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.012621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.057601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 127.199648][ T30] audit: type=1400 audit(1725866225.869:173): avc: denied { ioctl } for pid=5355 comm="syz.4.10" path="socket:[6857]" dev="sockfs" ino=6857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.657173][ T30] audit: type=1400 audit(1725866226.329:174): avc: denied { name_bind } for pid=5355 comm="syz.4.10" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 128.749755][ T30] audit: type=1400 audit(1725866226.329:175): avc: denied { node_bind } for pid=5355 comm="syz.4.10" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 128.870914][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 128.927447][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 130.195349][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 130.238142][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 132.046260][ T30] audit: type=1400 audit(1725866230.699:176): avc: denied { create } for pid=5393 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.194156][ T30] audit: type=1400 audit(1725866230.759:177): avc: denied { ioctl } for pid=5393 comm="syz.0.17" path="socket:[7545]" dev="sockfs" ino=7545 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.331467][ T30] audit: type=1400 audit(1725866231.059:178): avc: denied { read } for pid=5399 comm="syz.4.20" name="event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.546478][ T30] audit: type=1400 audit(1725866231.099:179): avc: denied { open } for pid=5399 comm="syz.4.20" path="/dev/input/event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.985746][ T30] audit: type=1400 audit(1725866231.369:180): avc: denied { read } for pid=5399 comm="syz.4.20" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.089376][ T5395] syzkaller0: entered promiscuous mode [ 133.096724][ T5395] syzkaller0: entered allmulticast mode [ 133.143712][ T30] audit: type=1400 audit(1725866231.369:181): avc: denied { open } for pid=5399 comm="syz.4.20" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.747188][ T30] audit: type=1400 audit(1725866231.869:182): avc: denied { relabelfrom } for pid=5392 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.797995][ T30] audit: type=1400 audit(1725866231.869:183): avc: denied { relabelto } for pid=5392 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.872943][ T30] audit: type=1400 audit(1725866232.489:184): avc: denied { read } for pid=5404 comm="syz.0.21" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.998555][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 134.007474][ T30] audit: type=1400 audit(1725866232.489:185): avc: denied { open } for pid=5404 comm="syz.0.21" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 134.038424][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 135.167858][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 135.183374][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 136.250673][ T5306] IPVS: starting estimator thread 0... [ 136.372865][ T5432] IPVS: using max 14 ests per chain, 33600 per kthread [ 136.610879][ T5280] IPVS: starting estimator thread 0... [ 136.676509][ T5430] ALSA: seq fatal error: cannot create timer (-22) [ 136.754229][ T5438] IPVS: using max 22 ests per chain, 52800 per kthread [ 136.762589][ T5306] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 136.801816][ T5437] ALSA: seq fatal error: cannot create timer (-22) [ 137.012924][ T5306] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 137.052031][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.133367][ T5306] usb 4-1: config 0 descriptor?? [ 137.187626][ T5306] pwc: Samsung MPC-C10 USB webcam detected. [ 138.275427][ T5306] pwc: send_video_command error -71 [ 138.295802][ T5306] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 138.312476][ T5306] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 138.336229][ T5306] usb 4-1: USB disconnect, device number 2 [ 138.550295][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.557533][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.689566][ T5451] ALSA: seq fatal error: cannot create timer (-22) [ 138.891749][ T5454] ALSA: seq fatal error: cannot create timer (-22) [ 138.912292][ T5306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.146014][ T5306] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 139.164718][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.218547][ T5306] usb 4-1: config 0 descriptor?? [ 139.270272][ T5306] pwc: Samsung MPC-C10 USB webcam detected. [ 139.902559][ T5306] pwc: recv_control_msg error -32 req 02 val 2b00 [ 139.952161][ T5306] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.059031][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 140.059081][ T30] audit: type=1400 audit(1725866238.789:198): avc: denied { write } for pid=5455 comm="syz.0.32" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.822864][ T5306] pwc: recv_control_msg error -32 req 04 val 1700 [ 140.840608][ T30] audit: type=1400 audit(1725866239.059:199): avc: denied { write } for pid=5455 comm="syz.0.32" name="udplite6" dev="proc" ino=4026533227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 140.865662][ T30] audit: type=1400 audit(1725866239.209:200): avc: denied { watch watch_reads } for pid=5455 comm="syz.0.32" path="/proc/27/net/udplite6" dev="proc" ino=4026533227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 140.890907][ T5306] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.976541][ T30] audit: type=1400 audit(1725866239.709:201): avc: denied { create } for pid=5462 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.109298][ T5306] pwc: recv_control_msg error -71 req 04 val 1300 [ 141.132400][ T5306] pwc: recv_control_msg error -71 req 04 val 1400 [ 141.142406][ T5306] pwc: recv_control_msg error -71 req 02 val 2000 [ 141.154811][ T5306] pwc: recv_control_msg error -71 req 02 val 2100 [ 141.174472][ T5306] pwc: recv_control_msg error -71 req 02 val 2200 [ 141.181689][ T5306] pwc: recv_control_msg error -71 req 06 val 0600 [ 141.192349][ T5306] pwc: recv_control_msg error -71 req 04 val 1500 [ 141.206632][ T5306] pwc: recv_control_msg error -71 req 02 val 2500 [ 141.222970][ T5306] pwc: recv_control_msg error -71 req 02 val 2400 [ 141.232378][ T5306] pwc: recv_control_msg error -71 req 02 val 2600 [ 141.240006][ T5306] pwc: recv_control_msg error -71 req 02 val 2900 [ 141.260086][ T5306] pwc: recv_control_msg error -71 req 02 val 2800 [ 141.273102][ T5306] pwc: recv_control_msg error -71 req 04 val 1100 [ 141.287174][ T5306] pwc: recv_control_msg error -71 req 04 val 1200 [ 141.331264][ T5306] pwc: Registered as video71. [ 141.392345][ T5306] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 141.459207][ T30] audit: type=1400 audit(1725866240.169:202): avc: denied { read } for pid=4661 comm="acpid" name="event4" dev="devtmpfs" ino=2334 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.479807][ T5306] usb 4-1: USB disconnect, device number 3 [ 141.539563][ T30] audit: type=1400 audit(1725866240.169:203): avc: denied { open } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2334 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.650936][ T30] audit: type=1400 audit(1725866240.179:204): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2334 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.650992][ T5249] udevd[5249]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 141.772161][ T5249] udevd[5249]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 141.976256][ T30] audit: type=1400 audit(1725866240.699:205): avc: denied { write } for pid=5462 comm="syz.1.33" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 142.027981][ T30] audit: type=1400 audit(1725866240.699:206): avc: denied { open } for pid=5462 comm="syz.1.33" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 143.077199][ T30] audit: type=1400 audit(1725866241.809:207): avc: denied { read } for pid=5471 comm="syz.3.36" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.907223][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.922938][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.933026][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.949067][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.957530][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.965796][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.771255][ T5427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.25'. [ 145.995015][ T5482] ALSA: seq fatal error: cannot create timer (-22) [ 146.062545][ T5238] Bluetooth: hci5: command tx timeout [ 148.148435][ T5238] Bluetooth: hci5: command tx timeout [ 149.006967][ T5473] chnl_net:caif_netlink_parms(): no params data found [ 149.080748][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.090873][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.099122][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.144122][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.173846][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.192333][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.251806][ T5240] Bluetooth: hci5: command tx timeout [ 150.331687][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 150.331709][ T30] audit: type=1400 audit(1725866249.059:210): avc: denied { execute } for pid=5514 comm="syz.0.45" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.499416][ T30] audit: type=1400 audit(1725866249.059:211): avc: denied { execute_no_trans } for pid=5514 comm="syz.0.45" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.583277][ T5517] ALSA: seq fatal error: cannot create timer (-22) [ 150.902317][ T5299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.092259][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 151.105157][ T5299] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.122293][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.130448][ T5299] usb 2-1: Product: syz [ 151.164136][ T5299] usb 2-1: Manufacturer: syz [ 151.168819][ T5299] usb 2-1: SerialNumber: syz [ 151.220315][ T2570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.233104][ T5299] r8152-cfgselector 2-1: Unknown version 0x0000 [ 151.239411][ T5299] r8152-cfgselector 2-1: config 0 descriptor?? [ 151.283703][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.310008][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.340178][ T5473] bridge_slave_0: entered allmulticast mode [ 151.358974][ T5240] Bluetooth: hci6: command tx timeout [ 151.376360][ T5473] bridge_slave_0: entered promiscuous mode [ 151.528137][ T2570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.559054][ T5299] r8152-cfgselector 2-1: Unknown version 0x0010 [ 151.572610][ T5299] r8152-cfgselector 2-1: bad CDC descriptors [ 151.579380][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.588246][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.610044][ T5473] bridge_slave_1: entered allmulticast mode [ 151.619392][ T5473] bridge_slave_1: entered promiscuous mode [ 151.776132][ T2570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.957824][ T5306] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 151.958163][ T5473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.150251][ T2570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.236447][ T5473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.302536][ T5240] Bluetooth: hci5: command tx timeout [ 153.400781][ T5473] team0: Port device team_slave_0 added [ 153.429172][ T5240] Bluetooth: hci6: command tx timeout [ 153.503337][ T5473] team0: Port device team_slave_1 added [ 154.774721][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.782136][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.847148][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.908937][ T5473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.971234][ T2570] bridge_slave_1: left allmulticast mode [ 154.991105][ T2570] bridge_slave_1: left promiscuous mode [ 155.003821][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.222315][ T5283] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.522590][ T5240] Bluetooth: hci6: command tx timeout [ 156.191389][ T2570] bridge_slave_0: left allmulticast mode [ 156.201206][ T2570] bridge_slave_0: left promiscuous mode [ 156.217586][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.372301][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 156.399349][ T5283] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.430152][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.451414][ T5283] usb 2-1: Product: syz [ 156.482353][ T5283] usb 2-1: Manufacturer: syz [ 156.501445][ T5283] usb 2-1: SerialNumber: syz [ 156.572725][ T5283] r8152-cfgselector 2-1: Unknown version 0x0000 [ 156.579014][ T5283] r8152-cfgselector 2-1: config 0 descriptor?? [ 157.094332][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.121109][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.166370][ T2570] bond0 (unregistering): Released all slaves [ 157.199923][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.212424][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.216728][ T5306] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 157.285885][ T5473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.327071][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 157.340200][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 157.582742][ T5240] Bluetooth: hci6: command tx timeout [ 157.641072][ T30] audit: type=1400 audit(1725866256.369:212): avc: denied { create } for pid=5569 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.804516][ T30] audit: type=1400 audit(1725866256.539:213): avc: denied { create } for pid=5569 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 157.902588][ T30] audit: type=1400 audit(1725866256.609:214): avc: denied { bind } for pid=5569 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.993063][ T5473] hsr_slave_0: entered promiscuous mode [ 158.185181][ T30] audit: type=1400 audit(1725866256.669:215): avc: denied { write } for pid=5569 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.224256][ T5473] hsr_slave_1: entered promiscuous mode [ 158.314180][ T5473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.321858][ T5473] Cannot create hsr debugfs directory [ 158.350131][ T5513] chnl_net:caif_netlink_parms(): no params data found [ 158.721880][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 158.750930][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 159.093329][ T2570] hsr_slave_0: left promiscuous mode [ 159.111598][ T30] audit: type=1400 audit(1725866257.839:216): avc: denied { sys_module } for pid=5584 comm="syz.0.61" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.151912][ T2570] hsr_slave_1: left promiscuous mode [ 159.169021][ T2570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.184918][ T30] audit: type=1400 audit(1725866257.839:217): avc: denied { bind } for pid=5584 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 159.214500][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.234975][ T30] audit: type=1400 audit(1725866257.839:218): avc: denied { name_bind } for pid=5584 comm="syz.0.61" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 159.262107][ T2570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.275648][ T30] audit: type=1400 audit(1725866257.839:219): avc: denied { node_bind } for pid=5584 comm="syz.0.61" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 159.309604][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.353514][ T30] audit: type=1400 audit(1725866257.839:220): avc: denied { listen } for pid=5584 comm="syz.0.61" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 159.392961][ T5586] dccp_close: ABORT with 32 bytes unread [ 159.407939][ T30] audit: type=1400 audit(1725866257.869:221): avc: denied { connect } for pid=5584 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 159.465833][ T2570] veth1_macvtap: left promiscuous mode [ 159.489344][ T2570] veth0_macvtap: left promiscuous mode [ 159.503815][ T2570] veth1_vlan: left promiscuous mode [ 159.513478][ T2570] veth0_vlan: left promiscuous mode [ 164.710900][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 164.710926][ T30] audit: type=1400 audit(1725866263.429:228): avc: denied { accept } for pid=5616 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.736951][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.828910][ T30] audit: type=1400 audit(1725866263.479:229): avc: denied { write } for pid=5616 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.106857][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 165.744417][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 166.094055][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 166.105671][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 167.174655][ T30] audit: type=1400 audit(1725866265.909:230): avc: denied { search } for pid=4890 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.232904][ T30] audit: type=1400 audit(1725866265.909:231): avc: denied { read } for pid=4890 comm="dhcpcd" name="n68" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.275169][ T30] audit: type=1400 audit(1725866265.909:232): avc: denied { open } for pid=4890 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.278282][ T30] audit: type=1400 audit(1725866265.909:233): avc: denied { getattr } for pid=4890 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.655186][ T5513] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.672560][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.688860][ T5513] bridge_slave_0: entered allmulticast mode [ 168.723530][ T5513] bridge_slave_0: entered promiscuous mode [ 168.792844][ T5513] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.042737][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.051081][ T5513] bridge_slave_1: entered allmulticast mode [ 169.061023][ T5513] bridge_slave_1: entered promiscuous mode [ 169.967733][ T30] audit: type=1400 audit(1725866268.679:234): avc: denied { read } for pid=5649 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.087938][ T30] audit: type=1400 audit(1725866268.679:235): avc: denied { open } for pid=5649 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.191671][ T5473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.194696][ T30] audit: type=1400 audit(1725866268.679:236): avc: denied { getattr } for pid=5649 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.033227][ T5513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.161282][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 172.443881][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 172.470967][ T5473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.504343][ T5665] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 173.526826][ T5513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.856955][ T30] audit: type=1400 audit(1725866272.589:237): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.960553][ T30] audit: type=1400 audit(1725866272.619:238): avc: denied { add_name } for pid=5644 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.031031][ T5473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.065970][ T30] audit: type=1400 audit(1725866272.619:239): avc: denied { create } for pid=5644 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.190604][ T30] audit: type=1400 audit(1725866272.619:240): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1862 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.292262][ T30] audit: type=1400 audit(1725866272.619:241): avc: denied { append } for pid=5644 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1862 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.386467][ T30] audit: type=1400 audit(1725866272.929:242): avc: denied { create } for pid=5684 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.400505][ T5513] team0: Port device team_slave_0 added [ 174.449535][ T5473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.567751][ T30] audit: type=1400 audit(1725866272.989:243): avc: denied { bind } for pid=5684 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.587443][ T5513] team0: Port device team_slave_1 added [ 175.006492][ T5513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.032110][ T5513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.076530][ T5513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.098949][ T5513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.118792][ T5513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.158123][ T5513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.184244][ T52] bridge_slave_1: left allmulticast mode [ 176.189970][ T52] bridge_slave_1: left promiscuous mode [ 176.214939][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.251605][ T52] bridge_slave_0: left allmulticast mode [ 176.266324][ T52] bridge_slave_0: left promiscuous mode [ 176.282629][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.351969][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.375515][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.390998][ T52] bond0 (unregistering): Released all slaves [ 177.888586][ T5711] syzkaller0: entered promiscuous mode [ 177.894427][ T5711] syzkaller0: entered allmulticast mode [ 182.353331][ T5513] hsr_slave_0: entered promiscuous mode [ 182.377599][ T5513] hsr_slave_1: entered promiscuous mode [ 182.393735][ T5513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.401395][ T5513] Cannot create hsr debugfs directory [ 182.409643][ T5724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88'. [ 185.612166][ C0] sched: RT throttling activated [ 194.898042][ T52] hsr_slave_0: left promiscuous mode [ 194.999243][ T52] hsr_slave_1: left promiscuous mode [ 195.042629][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.080473][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.119435][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.145607][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.232613][ T5790] netlink: 56 bytes leftover after parsing attributes in process `syz.1.98'. [ 195.239371][ T52] veth1_macvtap: left promiscuous mode [ 195.251886][ T52] veth0_macvtap: left promiscuous mode [ 195.268838][ T52] veth1_vlan: left promiscuous mode [ 195.304470][ T52] veth0_vlan: left promiscuous mode [ 195.430085][ T5791] dccp_close: ABORT with 32 bytes unread [ 196.282118][ T5799] ALSA: seq fatal error: cannot create timer (-22) [ 196.967307][ T52] team0 (unregistering): Port device team_slave_1 removed [ 197.841819][ T52] team0 (unregistering): Port device team_slave_0 removed [ 198.615892][ T5808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.101'. [ 198.683846][ T5473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.846017][ T5473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.894115][ T5473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.886875][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.875231][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.888860][ T5473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.554553][ T5826] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.749994][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 210.750023][ T30] audit: type=1400 audit(1725866309.479:278): avc: denied { read write } for pid=5837 comm="syz.3.108" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 210.850328][ T30] audit: type=1400 audit(1725866309.479:279): avc: denied { open } for pid=5837 comm="syz.3.108" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 210.942996][ T30] audit: type=1400 audit(1725866309.609:280): avc: denied { mounton } for pid=5837 comm="syz.3.108" path="/35/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.312301][ T30] audit: type=1400 audit(1725866311.039:281): avc: denied { unmount } for pid=5236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 212.793122][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.806811][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.815929][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.844254][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.853567][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.883601][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.022068][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.034589][ T5864] netlink: 56 bytes leftover after parsing attributes in process `syz.3.112'. [ 213.070293][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.082921][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.093595][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.106906][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.131031][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.599203][ T30] audit: type=1400 audit(1725866312.329:282): avc: denied { read write } for pid=5869 comm="syz.1.113" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.624808][ T5870] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 213.624808][ T5870] program syz.1.113 not setting count and/or reply_len properly [ 214.623203][ T30] audit: type=1400 audit(1725866312.329:283): avc: denied { open } for pid=5869 comm="syz.1.113" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.950004][ T5238] Bluetooth: hci2: command tx timeout [ 215.487493][ T5238] Bluetooth: hci4: command tx timeout [ 217.042277][ T5238] Bluetooth: hci2: command tx timeout [ 217.503223][ T5238] Bluetooth: hci4: command tx timeout [ 218.812297][ T5299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 219.447268][ T5238] Bluetooth: hci2: command tx timeout [ 219.588825][ T5238] Bluetooth: hci4: command tx timeout [ 219.602304][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 219.683383][ T5299] usb 1-1: config 0 has no interfaces? [ 219.724585][ T5299] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 219.762303][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.770398][ T5299] usb 1-1: Product: syz [ 219.829742][ T5299] usb 1-1: Manufacturer: syz [ 219.867929][ T5923] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 219.867929][ T5923] program syz.1.124 not setting count and/or reply_len properly [ 219.900122][ T5299] usb 1-1: SerialNumber: syz [ 219.983320][ T5299] usb 1-1: config 0 descriptor?? [ 221.656644][ T5238] Bluetooth: hci2: command tx timeout [ 221.665506][ T5238] Bluetooth: hci4: command tx timeout [ 222.760872][ T5283] usb 1-1: USB disconnect, device number 2 [ 222.844035][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 222.956392][ T2555] bridge_slave_1: left allmulticast mode [ 222.976439][ T2555] bridge_slave_1: left promiscuous mode [ 223.004363][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.084642][ T2555] bridge_slave_0: left allmulticast mode [ 223.090348][ T2555] bridge_slave_0: left promiscuous mode [ 223.129361][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.154714][ T5280] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 223.251765][ T5280] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 223.538944][ T5280] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 224.269533][ T5948] ALSA: seq fatal error: cannot create timer (-22) [ 224.355489][ T5958] dccp_close: ABORT with 32 bytes unread [ 224.496612][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.529582][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.565033][ T2555] bond0 (unregistering): Released all slaves [ 224.676392][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 224.700351][ T5963] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 224.700351][ T5963] program syz.0.133 not setting count and/or reply_len properly [ 224.989236][ T2555] hsr_slave_0: left promiscuous mode [ 225.012391][ T2555] hsr_slave_1: left promiscuous mode [ 225.031398][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.044325][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.070195][ T5971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.135'. [ 226.734119][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 226.859322][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 227.671893][ T5280] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 227.717924][ T5280] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 227.756606][ T5280] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 230.156573][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.216661][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.248960][ T5862] bridge_slave_0: entered allmulticast mode [ 230.277222][ T5862] bridge_slave_0: entered promiscuous mode [ 230.311321][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.332710][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.340490][ T5862] bridge_slave_1: entered allmulticast mode [ 230.368497][ T5862] bridge_slave_1: entered promiscuous mode [ 230.443990][ T6028] ALSA: seq fatal error: cannot create timer (-22) [ 230.698641][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.736565][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.778368][ T5857] bridge_slave_0: entered allmulticast mode [ 231.944228][ T5857] bridge_slave_0: entered promiscuous mode [ 232.225795][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.282778][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.344863][ T5857] bridge_slave_1: entered allmulticast mode [ 232.403483][ T5857] bridge_slave_1: entered promiscuous mode [ 232.555379][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.637781][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.439021][ T5248] Bluetooth: hci1: command 0x0406 tx timeout [ 233.445250][ T4614] Bluetooth: hci3: command 0x0406 tx timeout [ 233.470176][ T4614] Bluetooth: hci0: command 0x0406 tx timeout [ 233.812901][ T6052] netlink: 56 bytes leftover after parsing attributes in process `syz.0.151'. [ 233.955714][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.003908][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.060580][ T5862] team0: Port device team_slave_0 added [ 234.064092][ T30] audit: type=1400 audit(1725866332.789:284): avc: denied { read } for pid=6053 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.754846][ T5862] team0: Port device team_slave_1 added [ 235.252851][ T5857] team0: Port device team_slave_0 added [ 235.279336][ T5857] team0: Port device team_slave_1 added [ 235.926499][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.933624][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.982460][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.685977][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.982564][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.015361][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.337094][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.382195][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.459221][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.521797][ T2555] bridge_slave_1: left allmulticast mode [ 237.527669][ T2555] bridge_slave_1: left promiscuous mode [ 237.537150][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.553106][ T2555] bridge_slave_0: left allmulticast mode [ 237.562391][ T2555] bridge_slave_0: left promiscuous mode [ 237.576953][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.898688][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.918181][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.937051][ T6080] ALSA: seq fatal error: cannot create timer (-22) [ 237.954710][ T2555] bond0 (unregistering): Released all slaves [ 238.144981][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.188562][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.254599][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.529091][ T2555] hsr_slave_0: left promiscuous mode [ 238.610660][ T2555] hsr_slave_1: left promiscuous mode [ 238.622074][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.666543][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.530638][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 241.604709][ T6107] usb usb8: usbfs: process 6107 (syz.3.164) did not claim interface 0 before use [ 241.624046][ T30] audit: type=1400 audit(1725866340.349:285): avc: denied { create } for pid=6104 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.420779][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 243.021354][ T5862] hsr_slave_0: entered promiscuous mode [ 243.030229][ T5862] hsr_slave_1: entered promiscuous mode [ 243.060298][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.069315][ T5862] Cannot create hsr debugfs directory [ 243.131809][ T5857] hsr_slave_0: entered promiscuous mode [ 243.139021][ T5857] hsr_slave_1: entered promiscuous mode [ 243.149674][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.158277][ T5857] Cannot create hsr debugfs directory [ 243.543329][ T30] audit: type=1400 audit(1725866342.269:286): avc: denied { getopt } for pid=6122 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.832080][ T6128] dccp_close: ABORT with 32 bytes unread [ 244.872992][ T6134] ALSA: seq fatal error: cannot create timer (-22) [ 256.668438][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.690433][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.700987][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.710173][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.731054][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 256.738920][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.865428][ T5240] Bluetooth: hci5: command tx timeout [ 260.979333][ T5240] Bluetooth: hci5: command tx timeout [ 261.443692][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.450214][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.464111][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.188'. [ 263.092675][ T5240] Bluetooth: hci5: command tx timeout [ 263.937526][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.334174][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.421145][ T6221] ALSA: seq fatal error: cannot create timer (-22) [ 264.506563][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.724098][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.872854][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 265.103239][ T5240] Bluetooth: hci5: command tx timeout [ 267.052680][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.108770][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.175330][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.017659][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.321276][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.353631][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.381455][ T6178] bridge_slave_0: entered allmulticast mode [ 268.415103][ T6178] bridge_slave_0: entered promiscuous mode [ 268.745729][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.941931][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.202520][ T6178] bridge_slave_1: entered allmulticast mode [ 269.258705][ T6178] bridge_slave_1: entered promiscuous mode [ 269.839222][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.893463][ T11] bridge_slave_1: left allmulticast mode [ 269.922706][ T11] bridge_slave_1: left promiscuous mode [ 269.928772][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.036235][ T11] bridge_slave_0: left allmulticast mode [ 270.041926][ T11] bridge_slave_0: left promiscuous mode [ 270.084116][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.534214][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.545900][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.557409][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.569627][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.579714][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.590444][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.778552][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.807847][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.822969][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.853343][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.871218][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.882481][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.599647][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 271.685179][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 273.051982][ T5238] Bluetooth: hci0: command tx timeout [ 273.059578][ T5238] Bluetooth: hci6: command tx timeout [ 273.515924][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.524914][ T6301] ALSA: seq fatal error: cannot create timer (-22) [ 273.554179][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.598437][ T11] bond0 (unregistering): Released all slaves [ 273.698996][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.102423][ T5238] Bluetooth: hci0: command tx timeout [ 275.109330][ T5240] Bluetooth: hci6: command tx timeout [ 276.096879][ T6178] team0: Port device team_slave_0 added [ 276.186083][ T6178] team0: Port device team_slave_1 added [ 276.395281][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 276.440515][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 276.870978][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.919198][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.009383][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.047632][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.071376][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.183568][ T5240] Bluetooth: hci6: command tx timeout [ 277.189006][ T5240] Bluetooth: hci0: command tx timeout [ 277.202480][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.645960][ T11] hsr_slave_0: left promiscuous mode [ 278.687512][ T11] hsr_slave_1: left promiscuous mode [ 278.724412][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.732072][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.761702][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.782438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.836842][ T11] veth1_macvtap: left promiscuous mode [ 278.849184][ T11] veth0_macvtap: left promiscuous mode [ 278.905092][ T11] veth1_vlan: left promiscuous mode [ 278.918119][ T11] veth0_vlan: left promiscuous mode [ 279.302597][ T5240] Bluetooth: hci0: command tx timeout [ 279.308497][ T5240] Bluetooth: hci6: command tx timeout [ 280.252936][ T6366] ALSA: seq fatal error: cannot create timer (-22) [ 280.802745][ T11] team0 (unregistering): Port device team_slave_1 removed [ 280.914508][ T11] team0 (unregistering): Port device team_slave_0 removed [ 282.811405][ T6178] hsr_slave_0: entered promiscuous mode [ 282.894595][ T6178] hsr_slave_1: entered promiscuous mode [ 282.960458][ T6178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.012587][ T6178] Cannot create hsr debugfs directory [ 284.149304][ T6385] ALSA: seq fatal error: cannot create timer (-22) [ 284.699857][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 284.742295][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 285.764256][ T11] IPVS: stop unused estimator thread 0... [ 286.515109][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 287.029707][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 287.914708][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 287.948586][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 288.291626][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.352561][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.393005][ T6271] bridge_slave_0: entered allmulticast mode [ 288.419226][ T6271] bridge_slave_0: entered promiscuous mode [ 288.688073][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.714661][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.722023][ T6271] bridge_slave_1: entered allmulticast mode [ 288.756350][ T6271] bridge_slave_1: entered promiscuous mode [ 289.054949][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.070839][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.094225][ T6276] bridge_slave_0: entered allmulticast mode [ 289.114194][ T6276] bridge_slave_0: entered promiscuous mode [ 289.154419][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.185475][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.198244][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.208022][ T6276] bridge_slave_1: entered allmulticast mode [ 289.227068][ T6276] bridge_slave_1: entered promiscuous mode [ 289.387865][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.670738][ T6464] ALSA: seq fatal error: cannot create timer (-22) [ 291.108879][ T6271] team0: Port device team_slave_0 added [ 291.149165][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.176921][ T30] audit: type=1400 audit(1725866389.909:287): avc: denied { read } for pid=6474 comm="syz.0.224" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.203030][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.235938][ T6475] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 291.302643][ T30] audit: type=1400 audit(1725866389.909:288): avc: denied { open } for pid=6474 comm="syz.0.224" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.325658][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.397705][ T6271] team0: Port device team_slave_1 added [ 291.408390][ T30] audit: type=1400 audit(1725866389.969:289): avc: denied { ioctl } for pid=6474 comm="syz.0.224" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.742926][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 291.942253][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 291.943100][ T6276] team0: Port device team_slave_0 added [ 291.976974][ T25] usb 4-1: config 0 has no interfaces? [ 291.987594][ T6178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.994961][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.049372][ T25] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.089772][ T25] usb 4-1: Manufacturer: syz [ 292.151414][ T25] usb 4-1: config 0 descriptor?? [ 292.555173][ T6178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.768123][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.791650][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.880411][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.920759][ T6276] team0: Port device team_slave_1 added [ 292.936107][ T30] audit: type=1400 audit(1725866391.659:290): avc: denied { write } for pid=6479 comm="syz.3.225" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 292.958744][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.984929][ T6178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.076215][ T25] usb 4-1: USB disconnect, device number 4 [ 293.108280][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.136215][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.162842][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.209208][ T6501] ALSA: seq fatal error: cannot create timer (-22) [ 293.303660][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.310713][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.356268][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.381455][ T6178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.617406][ T30] audit: type=1400 audit(1725866392.349:291): avc: denied { ioctl } for pid=6503 comm="syz.0.228" path="/dev/ppp" dev="devtmpfs" ino=696 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 294.424690][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.432009][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.460481][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.677724][ T6271] hsr_slave_0: entered promiscuous mode [ 294.694107][ T6271] hsr_slave_1: entered promiscuous mode [ 294.712562][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.730560][ T6271] Cannot create hsr debugfs directory [ 294.824674][ T6276] hsr_slave_0: entered promiscuous mode [ 294.838755][ T6276] hsr_slave_1: entered promiscuous mode [ 294.959517][ T6276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.534596][ T6276] Cannot create hsr debugfs directory [ 296.721446][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.767700][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.815456][ T25] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 296.990190][ T11] bridge_slave_1: left allmulticast mode [ 297.010606][ T11] bridge_slave_1: left promiscuous mode [ 297.024393][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.043547][ T11] bridge_slave_0: left allmulticast mode [ 297.049340][ T11] bridge_slave_0: left promiscuous mode [ 297.075868][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.111832][ T11] bridge_slave_1: left allmulticast mode [ 297.123266][ T11] bridge_slave_1: left promiscuous mode [ 297.140120][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.169986][ T11] bridge_slave_0: left allmulticast mode [ 297.179808][ T11] bridge_slave_0: left promiscuous mode [ 297.192610][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.667520][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.686357][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.709898][ T11] bond0 (unregistering): Released all slaves [ 297.740801][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.765895][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.791213][ T11] bond0 (unregistering): Released all slaves [ 299.151825][ T11] hsr_slave_0: left promiscuous mode [ 299.159469][ T11] hsr_slave_1: left promiscuous mode [ 299.173891][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.181912][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.232650][ T11] hsr_slave_0: left promiscuous mode [ 299.249411][ T11] hsr_slave_1: left promiscuous mode [ 299.261079][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.270062][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.228435][ T11] team0 (unregistering): Port device team_slave_1 removed [ 300.269469][ T11] team0 (unregistering): Port device team_slave_0 removed [ 300.759802][ T11] team0 (unregistering): Port device team_slave_1 removed [ 300.806952][ T11] team0 (unregistering): Port device team_slave_0 removed [ 301.509612][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.549289][ T30] audit: type=1400 audit(1725866400.279:292): avc: denied { setopt } for pid=6557 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.808672][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.098550][ T6276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.178651][ T6276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.209666][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.216899][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.320923][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.328219][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.416295][ T6276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.467732][ T6276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 302.542382][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 302.755357][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 302.777538][ T25] usb 4-1: config 0 has no interfaces? [ 302.804957][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 302.814569][ T25] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 302.823731][ T25] usb 4-1: Manufacturer: syz [ 302.865014][ T25] usb 4-1: config 0 descriptor?? [ 303.339187][ T6271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.390880][ T30] audit: type=1400 audit(1725866402.119:293): avc: denied { rename } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.404944][ T6271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.456335][ T30] audit: type=1400 audit(1725866402.119:294): avc: denied { unlink } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.501327][ T6271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.510336][ T5282] usb 4-1: USB disconnect, device number 5 [ 303.589952][ T30] audit: type=1400 audit(1725866402.149:295): avc: denied { create } for pid=4658 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.624966][ T6271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.841866][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.921445][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.043285][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.108163][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.115379][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.190137][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.197372][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.302925][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.311449][ T6178] veth0_vlan: entered promiscuous mode [ 304.451920][ T6178] veth1_vlan: entered promiscuous mode [ 304.533303][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.695808][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.703138][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.787459][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.795505][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.043914][ T6178] veth0_macvtap: entered promiscuous mode [ 305.111672][ T6178] veth1_macvtap: entered promiscuous mode [ 305.371417][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.383817][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.395619][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.408618][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.426460][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.511038][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.545838][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.592370][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.652365][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.678953][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.694822][ T6178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.708634][ T6178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.719953][ T6178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.730002][ T30] audit: type=1400 audit(1725866404.459:296): avc: denied { nlmsg_write } for pid=6577 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.754911][ T6178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.847062][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.246106][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.268058][ T30] audit: type=1400 audit(1725866404.979:297): avc: denied { bind } for pid=6582 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.322001][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.333307][ T30] audit: type=1400 audit(1725866404.979:298): avc: denied { node_bind } for pid=6582 comm="syz.3.240" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 306.456861][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.563431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.587264][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.664030][ T30] audit: type=1400 audit(1725866405.379:299): avc: denied { mount } for pid=6178 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.687661][ T5283] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 306.878546][ T6271] veth0_vlan: entered promiscuous mode [ 306.923948][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 306.952017][ T5283] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 306.988413][ T5283] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 307.022175][ T6271] veth1_vlan: entered promiscuous mode [ 307.033930][ T5283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.066701][ T5283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 307.113674][ T5283] usb 4-1: config 1 has no interface number 0 [ 307.136402][ T5283] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 307.242870][ T5283] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 307.300170][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.334794][ T5283] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 307.429638][ T6271] veth0_macvtap: entered promiscuous mode [ 307.463477][ T6592] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 307.500714][ T6271] veth1_macvtap: entered promiscuous mode [ 307.586149][ T5283] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 307.628242][ T5283] snd_usb_pod 4-1:1.1: invalid control EP [ 307.658097][ T5283] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 307.684446][ T5283] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 307.725957][ T5283] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 307.751933][ T6276] veth0_vlan: entered promiscuous mode [ 307.856519][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.930120][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.946161][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.960399][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.980317][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.080976][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.885779][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.900604][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.911259][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.941851][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.953038][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.963592][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.000552][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.021525][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.049715][ T6276] veth1_vlan: entered promiscuous mode [ 309.125243][ T6271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.134333][ T6271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.151132][ T6271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.173168][ T6271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.519490][ T6276] veth0_macvtap: entered promiscuous mode [ 309.652889][ T6276] veth1_macvtap: entered promiscuous mode [ 309.867691][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.915159][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.966291][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.022379][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.068904][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.087080][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.127178][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.172563][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.236415][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.288458][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.357102][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.584910][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.602951][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.634828][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.659342][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.670448][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.681463][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.691920][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.703548][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.729653][ T5282] usb 4-1: USB disconnect, device number 6 [ 310.771738][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.893760][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.925626][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.935285][ T6276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.980302][ T6276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.991222][ T6276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.000180][ T6276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.684173][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.692047][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.826755][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.866011][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.599717][ T6628] virtio-fs: tag <(null)> not found [ 314.388776][ T30] audit: type=1400 audit(1725866413.119:300): avc: denied { ioctl } for pid=6632 comm="syz.3.250" path="socket:[14144]" dev="sockfs" ino=14144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.429589][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 314.857230][ T30] audit: type=1400 audit(1725866413.569:301): avc: denied { write } for pid=6635 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 315.079519][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 315.144246][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 315.504275][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.518835][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.530710][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.557009][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.564580][ T5282] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 315.576113][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 315.594006][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.804408][ T5282] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 315.883498][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.978302][ T5282] usb 4-1: config 0 descriptor?? [ 316.028997][ T5282] pwc: Samsung MPC-C10 USB webcam detected. [ 316.285261][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 316.329737][ T5282] pwc: send_video_command error -71 [ 316.353724][ T5282] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 316.378322][ T5282] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 316.492283][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 317.519278][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 317.547203][ T5282] usb 4-1: USB disconnect, device number 7 [ 317.553214][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 317.561871][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.579218][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 317.593635][ T9] usb 2-1: config 1 has no interface number 0 [ 317.601055][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 317.662491][ T5238] Bluetooth: hci2: command tx timeout [ 317.669122][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 317.687193][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.725644][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 423.112096][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 423.119199][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l P5836/1:b..l P4676/1:b..l [ 423.129806][ C1] rcu: (detected by 1, t=10502 jiffies, g=28825, q=639 ncpus=2) [ 423.137560][ C1] task:udevd state:R running task stack:24208 pid:4676 tgid:4676 ppid:1 flags:0x00000002 [ 423.150475][ C1] Call Trace: [ 423.153794][ C1] [ 423.156781][ C1] __schedule+0xe37/0x5490 [ 423.161299][ C1] ? __pfx___schedule+0x10/0x10 [ 423.166207][ C1] ? do_raw_read_unlock+0x44/0xe0 [ 423.171306][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 423.176816][ C1] preempt_schedule_common+0x44/0xc0 [ 423.182166][ C1] preempt_schedule_thunk+0x1a/0x30 [ 423.187430][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 423.193123][ C1] sock_def_readable+0x160/0x610 [ 423.198124][ C1] netlink_unicast+0x6f1/0x7f0 [ 423.202943][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 423.208289][ C1] netlink_sendmsg+0x8b8/0xd70 [ 423.213111][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.218446][ C1] ? __import_iovec+0x1fd/0x6e0 [ 423.223357][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.228714][ C1] ____sys_sendmsg+0xab5/0xc90 [ 423.233623][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 423.239144][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.244491][ C1] ? __pfx_mark_lock+0x10/0x10 [ 423.249315][ C1] ? do_wp_page+0xd94/0x3430 [ 423.253973][ C1] ___sys_sendmsg+0x135/0x1e0 [ 423.258720][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.263981][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 423.269000][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 423.274324][ C1] ? __fget_light+0x173/0x210 [ 423.279054][ C1] __sys_sendmsg+0x117/0x1f0 [ 423.283720][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.288893][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 423.294257][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 423.299620][ C1] do_syscall_64+0xcd/0x250 [ 423.304196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.310141][ C1] RIP: 0033:0x7f05a5324a4b [ 423.314609][ C1] RSP: 002b:00007ffe06382418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.323068][ C1] RAX: ffffffffffffffda RBX: 00005600319ab240 RCX: 00007f05a5324a4b [ 423.331080][ C1] RDX: 0000000000000000 RSI: 00007ffe06382428 RDI: 0000000000000004 [ 423.339175][ C1] RBP: 00005600319d3a00 R08: 0000000000000001 R09: 0000000000000000 [ 423.347182][ C1] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 423.355186][ C1] R13: 00000000000000b3 R14: 0000000000000000 R15: 0000000000000000 [ 423.363219][ C1] [ 423.366280][ C1] task:udevd state:R running task stack:25520 pid:5836 tgid:5836 ppid:4676 flags:0x00000002 [ 423.378080][ C1] Call Trace: [ 423.381396][ C1] [ 423.384372][ C1] __schedule+0xe37/0x5490 [ 423.389459][ C1] ? __lock_acquire+0x1570/0x3cb0 [ 423.394561][ C1] ? __pfx___schedule+0x10/0x10 [ 423.399466][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 423.404750][ C1] ? hlock_class+0x4e/0x130 [ 423.409319][ C1] preempt_schedule_irq+0x51/0x90 [ 423.414405][ C1] irqentry_exit+0x36/0x90 [ 423.418874][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.424905][ C1] RIP: 0010:set_root+0x243/0x610 [ 423.429896][ C1] Code: ff df 48 8b 45 a8 48 c1 e8 03 66 83 3c 08 00 0f 85 95 03 00 00 48 b9 00 00 00 00 00 fc ff df 48 8b 75 c8 49 8b 87 88 00 00 00 <49> 8b 97 90 00 00 00 48 89 46 20 48 8b 45 b8 48 89 56 28 48 c1 e8 [ 423.449728][ C1] RSP: 0018:ffffc900032278c8 EFLAGS: 00000246 [ 423.455838][ C1] RAX: ffff88801c6f1520 RBX: 0000000000000006 RCX: dffffc0000000000 [ 423.463847][ C1] RDX: ffff888028aa3c00 RSI: ffffc90003227b00 RDI: 0000000000000005 [ 423.471861][ C1] RBP: ffffc90003227950 R08: 0000000000000005 R09: 0000000000000000 [ 423.479875][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 423.487880][ C1] R13: 0000000000000000 R14: 0000000000000003 R15: ffff88802eb28200 [ 423.495894][ C1] ? set_root+0x1f8/0x610 [ 423.500263][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 423.505314][ C1] ? stack_trace_save+0x95/0xd0 [ 423.510186][ C1] nd_jump_root+0x3d5/0x580 [ 423.514712][ C1] path_init+0x1098/0x1a90 [ 423.519400][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 423.524627][ C1] path_lookupat+0x33/0x770 [ 423.529161][ C1] ? find_held_lock+0x2d/0x110 [ 423.533941][ C1] filename_lookup+0x1e5/0x5b0 [ 423.538716][ C1] ? __virt_addr_valid+0x2b4/0x590 [ 423.543846][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 423.549171][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 423.554571][ C1] user_path_at+0x3a/0x60 [ 423.558918][ C1] path_setxattr+0x126/0x280 [ 423.563528][ C1] ? __pfx_path_setxattr+0x10/0x10 [ 423.568696][ C1] ? __might_fault+0x13b/0x190 [ 423.573499][ C1] ? xfd_validate_state+0x5d/0x180 [ 423.578632][ C1] __x64_sys_lsetxattr+0xc1/0x160 [ 423.583670][ C1] ? do_syscall_64+0x91/0x250 [ 423.588380][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 423.593596][ C1] do_syscall_64+0xcd/0x250 [ 423.598121][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.604086][ C1] RIP: 0033:0x7f05a531fc1a [ 423.608513][ C1] RSP: 002b:00007ffe06381c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 423.616942][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05a531fc1a [ 423.624927][ C1] RDX: 00005600319e0cc0 RSI: 00007f05a56da638 RDI: 00005600319e1da0 [ 423.632913][ C1] RBP: 00005600319e0cc0 R08: 0000000000000000 R09: 42ac5d6d5363fb3d [ 423.640889][ C1] R10: 000000000000001f R11: 0000000000000246 R12: 00000000ffffffff [ 423.648866][ C1] R13: 0000000000000001 R14: 00005600319e1da0 R15: 00005600319faa60 [ 423.656883][ C1] [ 423.659907][ C1] task:kworker/u8:0 state:R running task stack:24016 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 423.671648][ C1] Workqueue: events_unbound toggle_allocation_gate [ 423.678261][ C1] Call Trace: [ 423.681539][ C1] [ 423.684480][ C1] __schedule+0xe37/0x5490 [ 423.689037][ C1] ? __pfx___schedule+0x10/0x10 [ 423.693925][ C1] ? __pfx_mark_lock+0x10/0x10 [ 423.698718][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 423.704103][ C1] preempt_schedule_common+0x44/0xc0 [ 423.709407][ C1] preempt_schedule_thunk+0x1a/0x30 [ 423.714638][ C1] ? __kmalloc_cache_node_noprof+0x84/0x350 [ 423.720569][ C1] _raw_spin_unlock+0x3e/0x50 [ 423.725271][ C1] __text_poke+0x618/0xca0 [ 423.729698][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 423.735115][ C1] ? __pfx___text_poke+0x10/0x10 [ 423.740064][ C1] ? __kmalloc_cache_node_noprof+0x84/0x350 [ 423.745983][ C1] text_poke_bp_batch+0x3e0/0x760 [ 423.751024][ C1] ? __kmalloc_cache_node_noprof+0x84/0x350 [ 423.756942][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 423.762504][ C1] ? __jump_label_patch+0x1db/0x400 [ 423.767722][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 423.774085][ C1] text_poke_finish+0x30/0x40 [ 423.778778][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 423.784887][ C1] jump_label_update+0x1d7/0x400 [ 423.789853][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 423.795872][ C1] static_key_disable+0x1a/0x20 [ 423.800795][ C1] toggle_allocation_gate+0x143/0x250 [ 423.806193][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 423.812135][ C1] process_one_work+0x9c5/0x1b40 [ 423.817118][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 423.822769][ C1] ? __pfx_process_one_work+0x10/0x10 [ 423.828178][ C1] ? assign_work+0x1a0/0x250 [ 423.832790][ C1] worker_thread+0x6c8/0xed0 [ 423.837437][ C1] ? __pfx_worker_thread+0x10/0x10 [ 423.842599][ C1] kthread+0x2c1/0x3a0 [ 423.846678][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.851888][ C1] ? __pfx_kthread+0x10/0x10 [ 423.856484][ C1] ret_from_fork+0x45/0x80 [ 423.860917][ C1] ? __pfx_kthread+0x10/0x10 [ 423.865520][ C1] ret_from_fork_asm+0x1a/0x30 [ 423.870414][ C1] [ 423.873451][ C1] rcu: rcu_preempt kthread starved for 10538 jiffies! g28825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 423.884706][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 423.894698][ C1] rcu: RCU grace-period kthread stack dump: [ 423.900608][ C1] task:rcu_preempt state:R running task stack:26720 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 423.912384][ C1] Call Trace: [ 423.915692][ C1] [ 423.918673][ C1] __schedule+0xe37/0x5490 [ 423.923141][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 423.928397][ C1] ? __pfx___schedule+0x10/0x10 [ 423.933287][ C1] ? schedule+0x298/0x350 [ 423.937680][ C1] ? __pfx_lock_release+0x10/0x10 [ 423.942784][ C1] ? __pfx___mod_timer+0x10/0x10 [ 423.947768][ C1] ? lock_acquire+0x1b1/0x560 [ 423.952495][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 423.957995][ C1] schedule+0xe7/0x350 [ 423.962109][ C1] schedule_timeout+0x136/0x2a0 [ 423.966993][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 423.972391][ C1] ? __pfx_process_timeout+0x10/0x10 [ 423.977711][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.983570][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 423.989102][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 423.993913][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 423.999240][ C1] ? rcu_gp_init+0xc82/0x1630 [ 424.003971][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 424.009203][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 424.015080][ C1] rcu_gp_kthread+0x271/0x380 [ 424.019793][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 424.025038][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.030279][ C1] ? __kthread_parkme+0x148/0x220 [ 424.035338][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 424.040572][ C1] kthread+0x2c1/0x3a0 [ 424.044681][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.049925][ C1] ? __pfx_kthread+0x10/0x10 [ 424.054546][ C1] ret_from_fork+0x45/0x80 [ 424.059007][ C1] ? __pfx_kthread+0x10/0x10 [ 424.063644][ C1] ret_from_fork_asm+0x1a/0x30 [ 424.068471][ C1] [ 424.071506][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 424.077862][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 424.088227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 424.098311][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 424.103640][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 48 d3 ec 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d d8 5d a5 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 424.123281][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 424.129377][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b16ead9 [ 424.137368][ C1] RDX: 0000000000000001 RSI: ffff888022ed0800 RDI: ffff888022ed0864 [ 424.145545][ C1] RBP: ffff888022ed0864 R08: 0000000000000001 R09: ffffed1017126fd9 [ 424.153573][ C1] R10: ffff8880b8937ecb R11: 0000000000000000 R12: ffff888021fe8000 [ 424.161589][ C1] R13: ffffffff8e961fe0 R14: 0000000000000001 R15: 0000000000000000 [ 424.169605][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 424.178566][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.185212][ C1] CR2: 0000001b332f8ff8 CR3: 000000006f302000 CR4: 00000000003506f0 [ 424.193221][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.201219][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.209233][ C1] Call Trace: [ 424.212557][ C1] [ 424.215429][ C1] ? show_regs+0x8c/0xa0 [ 424.219901][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 424.226268][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 424.231494][ C1] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 424.237028][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 424.242722][ C1] ? tmigr_requires_handle_remote+0x141/0x480 [ 424.248824][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 424.255294][ C1] ? hrtimer_run_queues+0x97/0x450 [ 424.260444][ C1] ? update_process_times+0x175/0x220 [ 424.265857][ C1] ? __pfx_update_process_times+0x10/0x10 [ 424.271634][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 424.277123][ C1] ? update_wall_time+0x1c/0x40 [ 424.282017][ C1] ? tick_nohz_handler+0x376/0x530 [ 424.287274][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 424.292865][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 424.298293][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 424.304055][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 424.310180][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 424.315341][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 424.321530][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 424.327374][ C1] [ 424.330312][ C1] [ 424.333261][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.339489][ C1] ? ct_kernel_exit+0x139/0x190 [ 424.344398][ C1] ? acpi_safe_halt+0x1a/0x20 [ 424.349113][ C1] acpi_idle_enter+0xc5/0x160 [ 424.353827][ C1] cpuidle_enter_state+0x85/0x500 [ 424.358908][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 424.364755][ C1] cpuidle_enter+0x4e/0xa0 [ 424.369198][ C1] do_idle+0x313/0x3f0 [ 424.373331][ C1] ? __pfx_do_idle+0x10/0x10 [ 424.377983][ C1] cpu_startup_entry+0x4f/0x60 [ 424.382775][ C1] start_secondary+0x220/0x2b0 [ 424.387589][ C1] ? __pfx_start_secondary+0x10/0x10 [ 424.392932][ C1] common_startup_64+0x13e/0x148 [ 424.397927][ C1]