last executing test programs: 18.472835909s ago: executing program 1 (id=1032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x1f, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "24001100"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 15.206958647s ago: executing program 1 (id=1036): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x228000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000040)=@tcp}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000042c0)) 14.650530823s ago: executing program 1 (id=1038): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c80008"], 0x51) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c00000800029af8492f2d639116f976d8d600", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0', [{}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '\xa8'}, {0x20, 'scalable\x00'}, {0x20, '#! '}, {0x20, 'msj`jr\x00'}, {}, {0x20, '#\x83 \x8e\xa70xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000180)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 10.49234493s ago: executing program 2 (id=1048): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x800000052, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.306625s ago: executing program 1 (id=1050): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x2, {0x1}}, 0x5c) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000640)="b4", 0x1}], 0x1}}], 0x1, 0x0) ptrace$ARCH_SET_GS(0x1e, r3, &(0x7f0000000200), 0x1001) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="d0", 0x1}]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x25}}, './file0\x00'}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$can_bcm(r8, &(0x7f0000000040)={0x1d, r2}, 0x10) 10.184177784s ago: executing program 4 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$inet(0xa, 0x801, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r6 = socket(0x1e, 0x4, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/55, 0x37}], 0x1, &(0x7f0000000200)=""/153, 0x99}}], 0x1, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRESDEC=r5, @ANYBLOB="b6ec082aca202792", @ANYRES8=r0], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendto$inet(r7, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) shutdown(r7, 0x1) 8.229623939s ago: executing program 1 (id=1052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_io_uring_setup(0x2099, &(0x7f0000000340)={0x0, 0x722f, 0x400, 0x1, 0xf9}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0x185, &(0x7f00000009c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, [{}, {}, {0x0, 0x24, "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"}, {0x18, 0x2, "5e14f0e74d2d42cfb3f27fafb60845f9"}, {0x0, 0x1, "d5170000dce9"}]}}}}}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x80d2) socket(0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) 8.228658741s ago: executing program 2 (id=1053): r0 = socket(0x2, 0x6, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) userfaultfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x37, &(0x7f0000000180)=0x100010000000004) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x1, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x5, 0x0, 0x2, 0x0, 0x0, 0xe9}) 8.226977041s ago: executing program 3 (id=1054): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a"], 0x44}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d323456536022e8dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x8, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1cd221, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) 7.855054748s ago: executing program 3 (id=1055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x60600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwrite64(r0, &(0x7f0000000080)='3', 0x500, 0x0) 7.777546853s ago: executing program 0 (id=1056): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44041}, 0x20000011) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000000)=""/86, &(0x7f0000000080)=""/223, &(0x7f0000000980)=""/4096, 0x2000}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 7.773813868s ago: executing program 2 (id=1057): mknodat(0xffffffffffffffff, 0x0, 0x800, 0x280) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r5, 0x0) write$dsp(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2, 0x6, {0x0, 0x8000, 0x0, 0xfffc, 0x3, 0x0, 0xfffc, 0x0, 0x0, 0xfffc, 0x2, 0x5, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={0x0, r7, r8}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000100)='1', 0x1}]) 5.498184025s ago: executing program 3 (id=1058): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000040b21626fe48e10000b4060000000000000095000000000000004766dbb7c392fae7982fcaed5ddd9f54e31bcadf3104f4e6e85d5379595351947a1ff4dd17b4af251017d72133b9ecc97ce082f363576ed79e06f0736bb772a0e02d4b5652c6e88c0551060000009c48b74b507a08ef7c562251ba734430c5d5e032a66e38ed083c60430135e3c242f3c58317aa470ad0b561c1136dac06bd25ab96cf82c741bfbc305f2351701d30"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setrlimit(0xe, &(0x7f00000001c0)={0x5, 0xb56}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x414d6714bf78e135}, 0x9c) socket(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000020801010000000000000000000000001f91c78fabbe2c6a751b7bb6bc40df636ec88f0a6e5e47d61b8b43b8e2cfa5ddceff78c5ba843b49940c2c8b6d474ff6", @ANYBLOB="9a3e3e89296414e33cc7fa289d32a035cbd5b24d843ffd8eae0b829ea5877d031b9435dcbedeca2799fb1836e4cb8e5067edf08c1044e6da733ccbc72cbff80017dbb99a688bbbb47c25e53be489aa0e8b087a1582e5c89cafaa0b79f5"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf250400000008001700", @ANYRES32=r5, @ANYBLOB="f7000adfa5980000"], 0x24}, 0x1, 0x0, 0x0, 0x20004851}, 0x40800) 5.415109678s ago: executing program 0 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f00000003c0)={0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000080)='!selx\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x1}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001a80), 0xa399, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000001d80)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 'syz1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5.308543509s ago: executing program 2 (id=1060): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc", 0x49, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private, @private}, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[], 0x0, 0x92281}) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000000)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.282445855s ago: executing program 4 (id=1061): r0 = socket(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='attr\x00') fchdir(r2) mount(0x0, 0x0, 0x0, 0x1000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000002c0)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 3.490636649s ago: executing program 0 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x3}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}}, {0x2, 0x0, @empty}, 0x290, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000000000}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[0x0]) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_l2cap(r3, &(0x7f0000000080), 0xe) syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 3.336782113s ago: executing program 3 (id=1063): io_submit(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2000001ff, 0x343a00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000100)={0x0, 0x0, 0x80000001, 0x7ffffe02, 0xb, 0x1fd, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800f0001006574685f383a64766d7270"], 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001100)={'bridge_slave_0\x00', &(0x7f00000010c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0xf0ff1f00000000) socket$inet(0x2, 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 2.892777823s ago: executing program 4 (id=1064): io_submit(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2000001ff, 0x343a00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000100)={0x0, 0x0, 0x80000001, 0x7ffffe02, 0xb, 0x1fd, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800f0001006574685f383a64766d7270"], 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001100)={'bridge_slave_0\x00', &(0x7f00000010c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0xf0ff1f00000000) socket$inet(0x2, 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 2.082519565s ago: executing program 1 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x0, 0x0, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) creat(&(0x7f0000000240)='./file0\x00', 0x9) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_open_procfs$pagemap(0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x6e6bb9, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x2, 0x0, 0xb7}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) (async) getpriority(0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000f80)={0x2020}, 0x2020) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2.074122757s ago: executing program 0 (id=1066): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a0300000000000000000000000000080005400000000208000a40000000000900010073797a3000000000200009801c0002800c00018008000140000000069bff0180080001400000006b090002"], 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) fcntl$setown(0xffffffffffffffff, 0x8, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) r5 = open$dir(0x0, 0x80143, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') fanotify_mark(r6, 0x1127adad6699695c, 0x48000020, r5, 0x0) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) mount(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000780)={'#! ', './file1', [{}, {0x20, '+'}, {0x20, ']&'}, {}, {0x20, 'fd/\x83P3\x00'}, {0x20, 'hugetlb.1GB.usage_in_bytes\x00'}, {0x20, '#'}], 0xa, "ee1795b6993acada5f6667d1a6115d66048710a3fa575ab42a4d533d32b0e5ff1f7a3ebf9dca49f12537637c5f60d2c7c29389a26ac1f92eced858d8a06102bd97dd3275aab1bebfdd20cdb5697d2cf745b035578e9212143dc2e73e7c2c5c8df0348ae00a1a317c81fa45d7f84a4bca6293efa38bff067f673632209b6fb98e0614a72415d9363df7a7708c5d114e860ef72acefe9cd7b6f83326325961a91e36757d166643e8932ee4751d4f20e4e5c52528628d3c8483fa5e79531096108daf7dbbbefffd380ec2ae2585151ed8b3f3aed8bac150c600513559a2b881920c27e3a7d5606d11245b9f1a6fd9463fe1e91887008b8a80b70c0f4e8afa991a18c3543ef1ecdda6bffdd7647eeb63d298a349c46656bb8b417049a35352c64f750e6dfd76c8b73591f3d6cec2c73a9e472dcdbf783654a52c2258f2cced5f7e6b7bac9bd1428efc1e26eef8473e046e943dec8bd3644c6f96af88e8a2a4e2c5ead6ad5fdf42073610f7aea8cb409ea5a86f5080be8d7812d2ff26c29f5b353a739534dd5ac0cf2e7f6c13b93406dfe7e675c62370132bf7911a2a960b9e4b563eadb3e974a5014b8bea150060c5820cd4645740acd1e3f55752b76f7860267d0a12d3ad5826b9adb3eb5dfc9a1f3cddda7941bc271be0e656b804058d9145301eae6ea984971689690343d3e75b0c7b37543f2860bbeca51379fc9c611dca39896c0632b4a29c67b542afef64b82375deb044ab166295d834d693d704fa0c4cccd6e915245e6567bc8037fc0c12a373835581416d9f1749f616efb949b53f2bef5ebe02da9a61eb3b4402e6fdf084a4c8ea8f405c57c104f837893efebb08023528bd7fc482c85c4e456b91d567e2a47d52f8991ac4e9b66e3af84c751c774e845de8410238145fc8adfd3fdcf2df"}, 0x2c6) 1.882994261s ago: executing program 2 (id=1067): r0 = socket(0x2, 0x6, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) userfaultfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x37, &(0x7f0000000180)=0x100010000000004) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x1, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x5, 0x0, 0x2, 0x0, 0x0, 0xe9}) 1.710228474s ago: executing program 3 (id=1068): creat(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x220823, &(0x7f0000000c80)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64990030303030303030303030303030303030303032303030302c757365725f69643d1e596b65c56d734e7638ad93af423b229c38a86ab93de7f61ba136dd95d02dca346869417b0200523eafa03ca1d6bfc67135247f09fc9533495e2773b3a8a68a9d40db5b430ef8d6b3b98b5d143cb13a1a8af784aa7be3bfc29e1b62809051ed19a66b1556a888a4ca1ff0da954b16395af6da1bce27f3ec15cc90a8f88b4356026561bf2ac1ebd431488a6f6ff9de1fc6f02d4cd94342179e2eed07bc14714583a40c048638da3d3807f40500e0a2b6000046fcf1119879016aaba139942c39cb34b713e7a3e3ced2282b66ed71c4d18025e16b23469ea1e5a36ced6e91", @ANYRESDEC=0xee00, @ANYBLOB="2c67726fc35e7d3f643d", @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="af991443a59703df479c1c30d5463525b1edc2ba17647304"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0xc942, 0x0) r1 = socket(0x40000000002, 0x3, 0x1) setsockopt(r1, 0xff, 0x1, 0x0, 0x32) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(0xffffffffffffffff) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000001340)={0x2, 0x401, 0x7fffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) mkdir(&(0x7f0000000440)='./file0\x00', 0x40) r2 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x29, 0x10, 0x0, 0x20000000) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x604, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f16380d308f95a023d009852471dd5a94adfe9549a28ae7fd1f0ece08403362cfe0f4fccffb1b6a2115354d4df15d017a3f00", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) mount$9p_xen(&(0x7f00000001c0), 0x0, &(0x7f0000000380), 0x80, &(0x7f00000003c0)={'trans=xen,', {[{@access_any}], [{@appraise_type}, {@smackfsdef}]}}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x4) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 915.180546ms ago: executing program 0 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x3}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}}, {0x2, 0x0, @empty}, 0x290, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000000000}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="fc", 0xa}]) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}]}, 0x1c}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none}, 0xe) 647.794794ms ago: executing program 4 (id=1070): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x2}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x1884024, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@nfs_export_on}], [{@fowner_lt}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='rcu_utilization\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 215.821622ms ago: executing program 2 (id=1071): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x30}, 0xc) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) flock(0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f00000003c0)={0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000080)='!selx\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x1}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001a80), 0xa399, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000001d80)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 'syz1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): xd73/0x4a00 [ 478.489310][ T9006] ? ksys_write+0x21c/0x260 [ 478.493793][ T9006] ? reacquire_held_locks+0x4c0/0x4c0 [ 478.499167][ T9006] ? __pfx___sys_bpf+0x10/0x10 [ 478.503940][ T9006] ? vfs_write+0x14d/0x1140 [ 478.508427][ T9006] ? __mutex_unlock_slowpath+0x164/0x650 [ 478.514052][ T9006] ? fput+0x32/0x390 [ 478.517929][ T9006] ? ksys_write+0x1ab/0x260 [ 478.522416][ T9006] ? __pfx_ksys_write+0x10/0x10 [ 478.527249][ T9006] __x64_sys_bpf+0x78/0xc0 [ 478.531653][ T9006] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.536836][ T9006] do_syscall_64+0xcd/0x250 [ 478.541327][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.547232][ T9006] RIP: 0033:0x7f81a5979e79 [ 478.551630][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.571232][ T9006] RSP: 002b:00007f81a66d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.579633][ T9006] RAX: ffffffffffffffda RBX: 00007f81a5b16058 RCX: 00007f81a5979e79 [ 478.587589][ T9006] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 0000000000000000 [ 478.595544][ T9006] RBP: 00007f81a66d1090 R08: 0000000000000000 R09: 0000000000000000 [ 478.603506][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.611463][ T9006] R13: 0000000000000001 R14: 00007f81a5b16058 R15: 00007ffe819c5118 [ 478.619421][ T9006] [ 478.679552][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.988326][ T4605] Bluetooth: hci5: command tx timeout [ 479.075226][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.158978][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 479.345254][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.480979][ T4605] Bluetooth: hci5: command tx timeout [ 484.630365][ T5302] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 484.770963][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.824286][ T9040] input: syz1 as /devices/virtual/input/input29 [ 485.864096][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.879378][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.894880][ T8953] bridge_slave_0: entered allmulticast mode [ 485.907676][ T8953] bridge_slave_0: entered promiscuous mode [ 485.961118][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.968857][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.978302][ T8953] bridge_slave_1: entered allmulticast mode [ 485.999432][ T8953] bridge_slave_1: entered promiscuous mode [ 486.079456][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 486.183755][ T9051] input: syz0 as /devices/virtual/input/input30 [ 486.730895][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 486.809631][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 486.828570][ T9] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=c3.34 [ 486.867538][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.913456][ T9] usb 3-1: Product: syz [ 486.943350][ T9] usb 3-1: Manufacturer: syz [ 486.946825][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.948565][ T29] audit: type=1400 audit(1723874949.616:1651): avc: denied { read } for pid=4881 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 486.964389][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.995408][ T9] usb 3-1: SerialNumber: syz [ 487.008973][ T9] usb 3-1: config 0 descriptor?? [ 487.025777][ T9] sisusb 3-1:0.0: Invalid USB2VGA device [ 487.031853][ T9] sisusb 3-1:0.0: probe with driver sisusb failed with error -22 [ 487.071436][ T9046] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 487.186277][ T29] audit: type=1400 audit(1723874949.846:1652): avc: denied { search } for pid=4881 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.236494][ T8953] team0: Port device team_slave_0 added [ 487.305279][ T29] audit: type=1400 audit(1723874949.856:1653): avc: denied { read } for pid=4881 comm="dhcpcd" name="n132" dev="tmpfs" ino=4224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 487.332073][ T8953] team0: Port device team_slave_1 added [ 487.348492][ T29] audit: type=1400 audit(1723874949.856:1654): avc: denied { open } for pid=4881 comm="dhcpcd" path="/run/udev/data/n132" dev="tmpfs" ino=4224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 487.393948][ T29] audit: type=1400 audit(1723874949.856:1655): avc: denied { getattr } for pid=4881 comm="dhcpcd" path="/run/udev/data/n132" dev="tmpfs" ino=4224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 487.446819][ T78] bridge_slave_1: left allmulticast mode [ 487.454447][ T78] bridge_slave_1: left promiscuous mode [ 487.484968][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.592035][ T78] bridge_slave_0: left allmulticast mode [ 487.606956][ T78] bridge_slave_0: left promiscuous mode [ 487.628649][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.696660][ T29] audit: type=1326 audit(1723874950.366:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.2.701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f583d179e79 code=0x0 [ 488.575857][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.603109][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.622655][ T78] bond0 (unregistering): Released all slaves [ 488.857828][ T29] audit: type=1400 audit(1723874951.446:1657): avc: denied { read } for pid=9071 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.912898][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.931086][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.957172][ T29] audit: type=1400 audit(1723874951.446:1658): avc: denied { open } for pid=9071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.970517][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.986950][ T29] audit: type=1400 audit(1723874951.446:1659): avc: denied { getattr } for pid=9071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.876810][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.898109][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.969893][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.259579][ T29] audit: type=1400 audit(1723874952.926:1660): avc: denied { write } for pid=9070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.058428][ T51] usb 3-1: USB disconnect, device number 7 [ 491.476322][ T78] hsr_slave_0: left promiscuous mode [ 491.518366][ T78] hsr_slave_1: left promiscuous mode [ 491.534057][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.547156][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.579133][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.606131][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.647783][ T78] veth1_macvtap: left promiscuous mode [ 491.656112][ T78] veth0_macvtap: left promiscuous mode [ 491.668020][ T78] veth1_vlan: left promiscuous mode [ 491.684176][ T78] veth0_vlan: left promiscuous mode [ 491.708589][ T9102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.089447][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 492.089466][ T29] audit: type=1400 audit(1723874954.736:1667): avc: denied { write } for pid=9100 comm="syz.2.712" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 492.433387][ T29] audit: type=1400 audit(1723874955.096:1668): avc: denied { create } for pid=9104 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 493.168496][ T9108] input: syz0 as /devices/virtual/input/input31 [ 494.834318][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.863586][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.913798][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.975796][ T9122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.993346][ T78] team0 (unregistering): Port device team_slave_1 removed [ 495.180759][ T78] team0 (unregistering): Port device team_slave_0 removed [ 496.575880][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.587452][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.604563][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.617253][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.658432][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 496.666110][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 496.836124][ T29] audit: type=1400 audit(1723874959.506:1669): avc: denied { connect } for pid=9131 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 497.070058][ T9113] netlink: 'syz.0.713': attribute type 5 has an invalid length. [ 497.089780][ T9113] netlink: 7 bytes leftover after parsing attributes in process `syz.0.713'. [ 497.213441][ T8953] hsr_slave_0: entered promiscuous mode [ 497.260827][ T8953] hsr_slave_1: entered promiscuous mode [ 497.317930][ T8953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.339830][ T29] audit: type=1400 audit(1723874960.016:1670): avc: denied { unmount } for pid=7170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 497.411371][ T8953] Cannot create hsr debugfs directory [ 499.097027][ T4605] Bluetooth: hci0: command tx timeout [ 500.279398][ T29] audit: type=1400 audit(1723874962.936:1671): avc: denied { connect } for pid=9146 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.480286][ T29] audit: type=1400 audit(1723874962.936:1672): avc: denied { write } for pid=9146 comm="syz.2.723" laddr=fe80::8051:c8ff:fe30:ae4 lport=4 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.572585][ T29] audit: type=1400 audit(1723874962.936:1673): avc: denied { read } for pid=9146 comm="syz.2.723" laddr=fe80::8051:c8ff:fe30:ae4 lport=4 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 501.179364][ T4605] Bluetooth: hci0: command tx timeout [ 501.216935][ T9182] input: syz1 as /devices/virtual/input/input32 [ 502.142742][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.155835][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.334226][ T9134] chnl_net:caif_netlink_parms(): no params data found [ 502.682683][ T8338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.057076][ T29] audit: type=1400 audit(1723874965.646:1674): avc: denied { write } for pid=9198 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 503.259271][ T5276] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 503.935976][ T4605] Bluetooth: hci0: command tx timeout [ 504.382522][ T5276] usb 3-1: config 0 has no interfaces? [ 504.431819][ T8338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.433654][ T5276] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.472494][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.489801][ T5276] usb 3-1: Product: syz [ 504.499084][ T5276] usb 3-1: Manufacturer: syz [ 504.517414][ T5276] usb 3-1: SerialNumber: syz [ 504.548720][ T5276] usb 3-1: config 0 descriptor?? [ 504.673176][ T8338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.743771][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.762131][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.780061][ T9134] bridge_slave_0: entered allmulticast mode [ 504.798229][ T9134] bridge_slave_0: entered promiscuous mode [ 504.817442][ T29] audit: type=1400 audit(1723874967.486:1675): avc: denied { mounton } for pid=9198 comm="syz.2.732" path="/proc/583/task" dev="proc" ino=26238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 504.885685][ T29] audit: type=1400 audit(1723874967.486:1676): avc: denied { mount } for pid=9198 comm="syz.2.732" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 504.931985][ T8338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.976177][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.020204][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.036813][ T9134] bridge_slave_1: entered allmulticast mode [ 505.064627][ T9134] bridge_slave_1: entered promiscuous mode [ 505.243605][ T9210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 505.507980][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 505.579003][ T9134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.670359][ T9134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.787722][ T8953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.039386][ T4605] Bluetooth: hci0: command tx timeout [ 506.588625][ T9213] input: syz0 as /devices/virtual/input/input33 [ 506.614811][ T5273] usb 3-1: USB disconnect, device number 8 [ 506.688122][ T8953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.828551][ T9134] team0: Port device team_slave_0 added [ 506.960078][ T8953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.021712][ T9134] team0: Port device team_slave_1 added [ 507.042223][ T8953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.240782][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.256810][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.799463][ T9134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.897655][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.949950][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.036511][ T9134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.089235][ T29] audit: type=1400 audit(1723874970.736:1677): avc: denied { getopt } for pid=9219 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 508.266177][ T4605] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 508.271685][ T8338] bridge_slave_1: left allmulticast mode [ 508.338444][ T8338] bridge_slave_1: left promiscuous mode [ 508.414361][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.502536][ T8338] bridge_slave_0: left allmulticast mode [ 508.531465][ T8338] bridge_slave_0: left promiscuous mode [ 508.926213][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.204607][ T8338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.301017][ T8338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.358340][ T8338] bond0 (unregistering): Released all slaves [ 510.643851][ T9134] hsr_slave_0: entered promiscuous mode [ 510.705620][ T9134] hsr_slave_1: entered promiscuous mode [ 510.732169][ T9134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.771607][ T9134] Cannot create hsr debugfs directory [ 510.849498][ T5276] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 511.061386][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 511.074189][ T5276] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 511.114069][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.144832][ T5276] usb 3-1: Product: syz [ 511.168699][ T5276] usb 3-1: Manufacturer: syz [ 511.237866][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.742'. [ 511.497457][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 511.515267][ T5276] usb 3-1: SerialNumber: syz [ 511.561575][ T5276] usb 3-1: config 0 descriptor?? [ 511.920670][ T8338] hsr_slave_0: left promiscuous mode [ 511.943327][ T8338] hsr_slave_1: left promiscuous mode [ 511.973938][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.997428][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.039158][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.066980][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.189956][ T8338] veth1_macvtap: left promiscuous mode [ 512.212627][ T8338] veth0_macvtap: left promiscuous mode [ 512.238036][ T8338] veth1_vlan: left promiscuous mode [ 512.266626][ T8338] veth0_vlan: left promiscuous mode [ 516.386626][ T8338] team0 (unregistering): Port device team_slave_1 removed [ 516.576891][ T8338] team0 (unregistering): Port device team_slave_0 removed [ 517.378320][ T5276] gspca_main: pac207-2.14.0 probing 093a:2476 [ 517.394239][ T5276] gspca_pac207: Failed to read a register (index 0x0000, error -32) [ 517.947608][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 518.531464][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 518.540919][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 518.552268][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 518.571145][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 518.584399][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 518.591912][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.924345][ T1170] usb 3-1: USB disconnect, device number 9 [ 520.749372][ T4605] Bluetooth: hci3: command tx timeout [ 521.359749][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 521.618923][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 521.795179][ T9334] chnl_net:caif_netlink_parms(): no params data found [ 522.819492][ T4605] Bluetooth: hci3: command tx timeout [ 523.604404][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.935166][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.943839][ T9334] bridge_slave_0: entered allmulticast mode [ 524.251754][ T9334] bridge_slave_0: entered promiscuous mode [ 524.406210][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.417511][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.461481][ T9334] bridge_slave_1: entered allmulticast mode [ 524.489570][ T9334] bridge_slave_1: entered promiscuous mode [ 524.907416][ T9388] FAULT_INJECTION: forcing a failure. [ 524.907416][ T9388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 524.920692][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.2.762 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 524.931296][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 524.941365][ T9388] Call Trace: [ 524.944649][ T9388] [ 524.947587][ T9388] dump_stack_lvl+0x16c/0x1f0 [ 524.952284][ T9388] should_fail_ex+0x497/0x5b0 [ 524.956972][ T9388] _copy_from_user+0x30/0xf0 [ 524.961586][ T9388] copy_msghdr_from_user+0x99/0x160 [ 524.966799][ T9388] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 524.972618][ T9388] ? __pfx___lock_acquire+0x10/0x10 [ 524.977834][ T9388] ___sys_sendmsg+0xff/0x1e0 [ 524.982445][ T9388] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.987666][ T9388] ? __fget_light+0x173/0x210 [ 524.992368][ T9388] __sys_sendmmsg+0x1a1/0x450 [ 524.997074][ T9388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 525.002310][ T9388] __x64_sys_sendmmsg+0x9c/0x100 [ 525.007267][ T9388] do_syscall_64+0xcd/0x250 [ 525.011797][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.017722][ T9388] RIP: 0033:0x7f583d179e79 [ 525.022148][ T9388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.041770][ T9388] RSP: 002b:00007f583dfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 525.050200][ T9388] RAX: ffffffffffffffda RBX: 00007f583d316130 RCX: 00007f583d179e79 [ 525.058185][ T9388] RDX: 0000000000000002 RSI: 0000000020003440 RDI: 000000000000000a [ 525.066164][ T9388] RBP: 00007f583dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 525.074142][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.082122][ T9388] R13: 0000000000000000 R14: 00007f583d316130 R15: 00007ffdd736a868 [ 525.090109][ T9388] [ 525.195276][ T29] audit: type=1400 audit(1723874987.566:1678): avc: denied { create } for pid=9384 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 525.308927][ T4605] Bluetooth: hci3: command tx timeout [ 525.605517][ T9134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.623822][ T9134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.000519][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.058054][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.495279][ T4605] Bluetooth: hci3: command tx timeout [ 528.187223][ T9134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 528.466798][ T9134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 528.508234][ T9334] team0: Port device team_slave_0 added [ 528.537653][ T9334] team0: Port device team_slave_1 added [ 529.793316][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.821799][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.854634][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.900215][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.919361][ T1170] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 529.928952][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.955926][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.020242][ T8338] bridge_slave_1: left allmulticast mode [ 530.030213][ T8338] bridge_slave_1: left promiscuous mode [ 530.036333][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.058394][ T8338] bridge_slave_0: left allmulticast mode [ 530.064139][ T8338] bridge_slave_0: left promiscuous mode [ 530.071742][ T1170] usb 2-1: device descriptor read/64, error -71 [ 530.086898][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.239831][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 530.498471][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 530.587104][ T1170] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 530.915651][ T1170] usb 2-1: device descriptor read/64, error -71 [ 531.050202][ T1170] usb usb2-port1: attempt power cycle [ 531.560371][ T8338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.618389][ T8338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.629321][ T1170] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 531.652168][ T8338] bond0 (unregistering): Released all slaves [ 531.668096][ T1170] usb 2-1: device descriptor read/8, error -71 [ 531.814674][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 531.891269][ T9334] hsr_slave_0: entered promiscuous mode [ 531.939597][ T9334] hsr_slave_1: entered promiscuous mode [ 531.949391][ T1170] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 531.970986][ T9334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.987757][ T9334] Cannot create hsr debugfs directory [ 532.002503][ T8338] hsr_slave_0: left promiscuous mode [ 532.008339][ T8338] hsr_slave_1: left promiscuous mode [ 532.024878][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.038570][ T1170] usb 2-1: device descriptor read/8, error -71 [ 532.040249][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.189839][ T1170] usb usb2-port1: unable to enumerate USB device [ 532.478293][ T8338] team0 (unregistering): Port device team_slave_1 removed [ 532.513051][ T8338] team0 (unregistering): Port device team_slave_0 removed [ 533.891530][ T9446] input: syz0 as /devices/virtual/input/input34 [ 534.165056][ T4605] Bluetooth: hci4: unexpected event 0x08 length: 78 > 4 [ 535.364017][ T9134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.517915][ T9134] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.762727][ T9458] input: syz0 as /devices/virtual/input/input35 [ 536.266513][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.273751][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.301084][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.308290][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.691860][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 536.803881][ T29] audit: type=1400 audit(1723874999.466:1679): avc: denied { sys_module } for pid=9134 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 536.938944][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 537.292746][ T9334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 537.323415][ T9134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.331943][ T9334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 537.362140][ T9334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.388606][ T9334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 537.523792][ T9134] veth0_vlan: entered promiscuous mode [ 537.592023][ T9134] veth1_vlan: entered promiscuous mode [ 537.724339][ T9134] veth0_macvtap: entered promiscuous mode [ 537.783321][ T9134] veth1_macvtap: entered promiscuous mode [ 538.074772][ T9481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.781'. [ 538.270068][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.287732][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.299671][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.384417][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 539.019283][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.029134][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.040818][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.182896][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.304529][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.328572][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.349260][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.379715][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.392467][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.405350][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.456688][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.526683][ T9134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.538081][ T9134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.562706][ T9134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.607128][ T9134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.625087][ T9334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.753881][ T9334] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.877885][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.885045][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.893856][ T4605] Bluetooth: hci4: unexpected event 0x08 length: 78 > 4 [ 540.067456][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.127897][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.234446][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.241662][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.280512][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.288741][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.318353][ T29] audit: type=1400 audit(1723875002.986:1680): avc: denied { mounton } for pid=9134 comm="syz-executor" path="/root/syzkaller.Q8n7ag/syz-tmp" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 540.448705][ T29] audit: type=1400 audit(1723875003.026:1681): avc: denied { mount } for pid=9134 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 540.487518][ T29] audit: type=1400 audit(1723875003.156:1682): avc: denied { mounton } for pid=9134 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 540.596940][ T9334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.609733][ T29] audit: type=1400 audit(1723875003.156:1683): avc: denied { mount } for pid=9134 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 540.635731][ T9334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.434448][ T9334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.012861][ T9526] affs: Unrecognized mount option "ßÉûÁ8Ÿ]DïÔòKxÛõp„'Ádi!ê§æ¬„" or missing value [ 542.024287][ T9526] affs: Error parsing options [ 542.040965][ T29] audit: type=1400 audit(1723875004.666:1684): avc: denied { accept } for pid=9518 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 542.669316][ T29] audit: type=1400 audit(1723875004.676:1685): avc: denied { ioctl } for pid=9518 comm="syz.1.788" path="socket:[30799]" dev="sockfs" ino=30799 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 542.774236][ T9530] input: syz1 as /devices/virtual/input/input36 [ 542.835637][ T29] audit: type=1400 audit(1723875005.506:1686): avc: denied { nlmsg_write } for pid=9524 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 542.862600][ T9529] Bluetooth: MGMT ver 1.23 [ 542.890232][ T4605] Bluetooth: hci4: unexpected cc 0x1001 length: 65 > 9 [ 542.897141][ T4605] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 542.925108][ T29] audit: type=1400 audit(1723875005.536:1687): avc: denied { ioctl } for pid=9524 comm="syz.2.790" path="socket:[29779]" dev="sockfs" ino=29779 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.129684][ T29] audit: type=1800 audit(1723875005.756:1688): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.790" name="/newroot/167/file0" dev="tmpfs" ino=910 res=0 errno=0 [ 543.314747][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 544.718686][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 545.198664][ T9334] veth0_vlan: entered promiscuous mode [ 545.251331][ T9334] veth1_vlan: entered promiscuous mode [ 545.404955][ T9334] veth0_macvtap: entered promiscuous mode [ 545.444770][ T9334] veth1_macvtap: entered promiscuous mode [ 545.499086][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.531939][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.550979][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.569323][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.598532][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.638004][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.665435][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.677589][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.760823][ T9334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.805730][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.822824][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.906972][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.930682][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.000921][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 546.260564][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 546.314112][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.355408][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.394175][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.442100][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.548656][ T9334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.684011][ T9334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.828012][ T9334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.869777][ T9576] kAFS: No cell specified [ 546.900039][ T9334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.989436][ T9334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.202032][ T8925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 547.344498][ T8314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.407116][ T8314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.425195][ T8925] usb 3-1: config index 0 descriptor too short (expected 7397, got 18) [ 547.444518][ T8925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.503612][ T8925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 18 [ 547.544274][ T8925] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 547.554431][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.582125][ T8925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.594647][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.673227][ T8925] usb 3-1: config 0 descriptor?? [ 548.314785][ T8925] usb 3-1: string descriptor 0 read error: -71 [ 548.359937][ T8925] usb 3-1: USB disconnect, device number 10 [ 548.722479][ T9589] input: syz1 as /devices/virtual/input/input37 [ 549.116764][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 551.214147][ T29] audit: type=1400 audit(1723875013.886:1689): avc: denied { shutdown } for pid=9609 comm="syz.2.809" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.511407][ T5273] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 551.666828][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'. [ 551.959693][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 551.995096][ T5273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.025365][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 552.033278][ T5273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.058314][ T5273] usb 3-1: config 1 interface 1 altsetting 240 endpoint 0x82 has invalid wMaxPacketSize 0 [ 552.082801][ T5273] usb 3-1: config 1 interface 1 altsetting 240 bulk endpoint 0x82 has invalid maxpacket 0 [ 552.098681][ T5273] usb 3-1: config 1 interface 1 altsetting 240 endpoint 0x3 has invalid wMaxPacketSize 0 [ 552.113400][ T5273] usb 3-1: config 1 interface 1 altsetting 240 bulk endpoint 0x3 has invalid maxpacket 0 [ 552.132167][ T5273] usb 3-1: config 1 interface 1 has no altsetting 1 [ 552.157728][ T5273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.178489][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.201512][ T5273] usb 3-1: Product: syz [ 552.208010][ T5273] usb 3-1: Manufacturer: syz [ 552.213240][ T5273] usb 3-1: SerialNumber: syz [ 552.227690][ T5273] usb 3-1: selecting invalid altsetting 1 [ 552.233592][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 552.257438][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 552.271830][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.287714][ T8] usb 2-1: Product: syz [ 552.292756][ T8] usb 2-1: Manufacturer: syz [ 552.298627][ T8] usb 2-1: SerialNumber: syz [ 552.347850][ T8] usb 2-1: config 0 descriptor?? [ 552.365730][ T8] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 552.482717][ T5273] cdc_ncm 3-1:1.0: bind() failure [ 552.530226][ T5273] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 552.548301][ T5273] cdc_ncm 3-1:1.1: bind() failure [ 552.581247][ T5273] usb 3-1: USB disconnect, device number 11 [ 552.774827][ T8] gspca_vc032x: reg_w err -71 [ 552.820831][ T8] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 552.843142][ T8] usb 2-1: USB disconnect, device number 16 [ 553.768542][ T9638] input: syz1 as /devices/virtual/input/input38 [ 556.161549][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 558.013952][ T9680] 9pnet: Could not find request transport: xen [ 558.432364][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.824'. [ 561.662918][ T4605] Bluetooth: hci3: unexpected event 0x08 length: 78 > 4 [ 561.887858][ T29] audit: type=1400 audit(1723875024.556:1690): avc: denied { accept } for pid=9762 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.553325][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.559716][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.963969][ T9766] vivid-000: kernel_thread() failed [ 567.436344][ T9783] 9pnet: Could not find request transport: xen [ 571.826817][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 571.846075][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 572.776380][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.930935][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.939888][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.948326][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.956382][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 572.963952][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.218100][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 574.606046][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 574.735289][ T9812] chnl_net:caif_netlink_parms(): no params data found [ 574.892003][ T9838] 9pnet: Could not find request transport: xen [ 575.062160][ T4605] Bluetooth: hci5: command tx timeout [ 575.518165][ T8308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.081273][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 576.147833][ T8308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.256400][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.264001][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.281799][ T9812] bridge_slave_0: entered allmulticast mode [ 576.300128][ T9812] bridge_slave_0: entered promiscuous mode [ 576.325577][ T4605] Bluetooth: hci0: unexpected event 0x08 length: 78 > 4 [ 576.329377][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 576.360445][ T8308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.363987][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.419388][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.442523][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.451581][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.493029][ T9812] bridge_slave_1: entered allmulticast mode [ 576.516393][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 576.523062][ T9812] bridge_slave_1: entered promiscuous mode [ 576.547099][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 576.577057][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.741875][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.751279][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.139303][ T4605] Bluetooth: hci5: command tx timeout [ 577.492490][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 577.515220][ T9] usbtmc 2-1:16.0: can't read capabilities [ 577.587179][ T8308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.762578][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.781665][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.840657][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.850542][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.859624][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.868698][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.885048][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.960224][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.969311][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.004242][ T9812] team0: Port device team_slave_0 added [ 578.034327][ T9812] team0: Port device team_slave_1 added [ 578.059423][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.068499][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.077545][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.149503][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.158539][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.167560][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.176576][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.185593][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.194690][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.254611][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.279751][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.307684][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.359953][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 578.372032][ T51] usb 2-1: USB disconnect, device number 17 [ 578.510430][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.559677][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.585570][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.728884][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.091335][ T8308] bridge_slave_1: left allmulticast mode [ 579.097021][ T8308] bridge_slave_1: left promiscuous mode [ 579.139699][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.175246][ T8308] bridge_slave_0: left allmulticast mode [ 579.181741][ T8308] bridge_slave_0: left promiscuous mode [ 579.221736][ T4605] Bluetooth: hci5: command tx timeout [ 579.231351][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.897626][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 581.306482][ T4605] Bluetooth: hci5: command tx timeout [ 581.540173][ T8308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.590868][ T8308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.649820][ T8308] bond0 (unregistering): Released all slaves [ 581.737294][ T9812] hsr_slave_0: entered promiscuous mode [ 581.755980][ T9812] hsr_slave_1: entered promiscuous mode [ 581.778762][ T9812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.835263][ T9812] Cannot create hsr debugfs directory [ 582.333630][ T29] audit: type=1400 audit(1723875044.936:1691): avc: denied { read } for pid=9903 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 582.359264][ T29] audit: type=1400 audit(1723875044.936:1692): avc: denied { read write } for pid=9903 comm="syz.3.867" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 582.500381][ T9909] ebt_among: src integrity fail: 300 [ 582.707888][ T29] audit: type=1400 audit(1723875044.936:1693): avc: denied { open } for pid=9903 comm="syz.3.867" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 583.000589][ T29] audit: type=1400 audit(1723875045.676:1694): avc: denied { create } for pid=9905 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 583.326424][ T29] audit: type=1400 audit(1723875045.696:1695): avc: denied { getopt } for pid=9905 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 583.337147][ T9908] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 583.379527][ T9908] netlink: 2 bytes leftover after parsing attributes in process `syz.3.867'. [ 583.388625][ T9908] team0: entered promiscuous mode [ 583.399333][ T9908] team_slave_0: entered promiscuous mode [ 583.419718][ T9908] team_slave_1: entered promiscuous mode [ 583.444485][ T9908] bridge0: port 3(team0) entered blocking state [ 583.468267][ T9908] bridge0: port 3(team0) entered disabled state [ 583.487114][ T9908] team0: entered allmulticast mode [ 583.502729][ T9908] team_slave_0: entered allmulticast mode [ 583.510100][ T9908] team_slave_1: entered allmulticast mode [ 583.548166][ T9908] bridge0: port 3(team0) entered blocking state [ 583.554593][ T9908] bridge0: port 3(team0) entered forwarding state [ 586.525900][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 587.069704][ T4605] Bluetooth: hci4: unexpected event 0x08 length: 78 > 4 [ 587.251284][ T1170] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 587.973258][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.014680][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 588.062593][ T1170] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 588.105615][ T8308] hsr_slave_0: left promiscuous mode [ 588.106649][ T1170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.121543][ T4605] Bluetooth: hci4: link tx timeout [ 588.133964][ T4605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 588.147471][ T8308] hsr_slave_1: left promiscuous mode [ 588.176623][ T1170] usb 1-1: config 0 descriptor?? [ 588.185099][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.193740][ T9934] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.225140][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.245373][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.253067][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.438253][ T8308] veth1_macvtap: left promiscuous mode [ 588.444758][ T8308] veth0_macvtap: left promiscuous mode [ 588.450707][ T8308] veth1_vlan: left promiscuous mode [ 588.459971][ T8308] veth0_vlan: left promiscuous mode [ 588.766152][ T1170] appletouch 1-1:0.0: Geyser mode initialized. [ 588.821959][ T1170] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input39 [ 588.917760][ C1] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 589.028644][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.087830][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.053136][ C0] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 590.179355][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 590.210065][ C1] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 591.559475][ T5273] usb 1-1: USB disconnect, device number 14 [ 591.640275][ T5273] appletouch 1-1:0.0: input: appletouch disconnected [ 591.830523][ T8308] team0 (unregistering): Port device team_slave_1 removed [ 592.388368][ T8308] team0 (unregistering): Port device team_slave_0 removed [ 592.731511][ T9977] FAULT_INJECTION: forcing a failure. [ 592.731511][ T9977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.747270][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.3.881 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 592.757872][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 592.767908][ T9977] Call Trace: [ 592.771173][ T9977] [ 592.774085][ T9977] dump_stack_lvl+0x16c/0x1f0 [ 592.778751][ T9977] should_fail_ex+0x497/0x5b0 [ 592.783760][ T9977] _copy_from_user+0x30/0xf0 [ 592.788340][ T9977] bpf_prog_load+0x1bc1/0x2660 [ 592.793096][ T9977] ? __pfx_bpf_prog_load+0x10/0x10 [ 592.798193][ T9977] ? avc_has_perm+0x11b/0x1c0 [ 592.802862][ T9977] ? selinux_bpf+0xde/0x130 [ 592.807347][ T9977] ? security_bpf+0x8c/0xc0 [ 592.811840][ T9977] __sys_bpf+0x8e9/0x4a00 [ 592.816160][ T9977] ? ksys_write+0x21c/0x260 [ 592.820646][ T9977] ? reacquire_held_locks+0x4c0/0x4c0 [ 592.826007][ T9977] ? __pfx___sys_bpf+0x10/0x10 [ 592.830756][ T9977] ? vfs_write+0x14d/0x1140 [ 592.835238][ T9977] ? __mutex_unlock_slowpath+0x164/0x650 [ 592.840866][ T9977] ? fput+0x32/0x390 [ 592.844748][ T9977] ? ksys_write+0x1ab/0x260 [ 592.849242][ T9977] ? __pfx_ksys_write+0x10/0x10 [ 592.854080][ T9977] __x64_sys_bpf+0x78/0xc0 [ 592.858480][ T9977] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.863664][ T9977] do_syscall_64+0xcd/0x250 [ 592.868155][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.874052][ T9977] RIP: 0033:0x7f172e779e79 [ 592.878448][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.898042][ T9977] RSP: 002b:00007f172f486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.906438][ T9977] RAX: ffffffffffffffda RBX: 00007f172e916058 RCX: 00007f172e779e79 [ 592.914392][ T9977] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 592.922347][ T9977] RBP: 00007f172f486090 R08: 0000000000000000 R09: 0000000000000000 [ 592.930300][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.938261][ T9977] R13: 0000000000000000 R14: 00007f172e916058 R15: 00007ffd8479e0e8 [ 592.946235][ T9977] [ 592.949299][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.234915][ T4605] Bluetooth: hci0: unexpected event 0x08 length: 78 > 4 [ 599.428710][ T9812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.496202][ T9812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.504120][ T29] audit: type=1400 audit(1723875062.176:1696): avc: denied { name_connect } for pid=10012 comm="syz.0.891" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 599.547961][ T9812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 599.630285][ T9812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.207009][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.403451][ T9812] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.460266][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.467410][ T8322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.543769][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.551038][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.372650][ T9812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.405028][ T9812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.749161][T10042] input: syz0 as /devices/virtual/input/input40 [ 604.466214][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.692725][ T9] IPVS: starting estimator thread 0... [ 604.722585][T10066] IPVS: set_ctl: invalid protocol: 0 172.20.20.1:0 [ 604.781908][T10073] IPVS: using max 15 ests per chain, 36000 per kthread [ 605.105881][T10082] trusted_key: encrypted_key: key user:syz not found [ 605.116530][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 606.249811][ T8925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 607.047026][ T29] audit: type=1400 audit(1723875069.706:1697): avc: denied { override_creds } for pid=10088 comm="syz.0.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 607.063004][ T9812] veth0_vlan: entered promiscuous mode [ 607.125687][ T9812] veth1_vlan: entered promiscuous mode [ 607.423170][T10103] kernel profiling enabled (shift: 1) [ 608.530266][ T8925] usb 4-1: Using ep0 maxpacket: 16 [ 608.662947][ T8925] usb 4-1: device descriptor read/all, error -71 [ 608.735980][ T9812] veth0_macvtap: entered promiscuous mode [ 608.802948][ T9812] veth1_macvtap: entered promiscuous mode [ 608.862035][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.921824][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.979475][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.009574][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.041890][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.069584][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.079558][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.090154][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.102059][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.114366][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.127021][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.138395][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.148912][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.160450][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.178923][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.188874][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.202689][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.236111][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.303228][ T9812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.317039][ T9812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.350052][ T9812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.370566][ T9812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.615614][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.638325][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.681806][ T8341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.690208][ T8341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.152229][ T29] audit: type=1400 audit(1723875073.816:1698): avc: denied { read } for pid=10133 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 612.793739][T10155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.873796][T10155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.883643][ T29] audit: type=1400 audit(1723875075.536:1699): avc: denied { create } for pid=10150 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.027669][ T29] audit: type=1400 audit(1723875075.536:1700): avc: denied { write } for pid=10150 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.048007][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.227550][T10159] FAULT_INJECTION: forcing a failure. [ 613.227550][T10159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.240727][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.1.920 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 613.251415][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 613.261476][T10159] Call Trace: [ 613.264761][T10159] [ 613.267695][T10159] dump_stack_lvl+0x16c/0x1f0 [ 613.272389][T10159] should_fail_ex+0x497/0x5b0 [ 613.277080][T10159] _copy_from_user+0x30/0xf0 [ 613.281697][T10159] do_ipt_set_ctl+0x8f2/0xc30 [ 613.286385][T10159] ? trace_contention_end+0xea/0x140 [ 613.291691][T10159] ? __mutex_lock+0x170/0x9c0 [ 613.296385][T10159] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 613.301597][T10159] ? __pfx___mutex_lock+0x10/0x10 [ 613.306641][T10159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 613.312643][T10159] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 613.318642][T10159] nf_setsockopt+0x8a/0xf0 [ 613.323074][T10159] ip_setsockopt+0xcb/0xf0 [ 613.327513][T10159] udp_setsockopt+0x7d/0xd0 [ 613.332038][T10159] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 613.337950][T10159] do_sock_setsockopt+0x222/0x480 [ 613.342996][T10159] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 613.348561][T10159] ? __fget_light+0x173/0x210 [ 613.353262][T10159] __sys_setsockopt+0x1a4/0x270 [ 613.358125][T10159] ? __pfx___sys_setsockopt+0x10/0x10 [ 613.363509][T10159] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.368725][T10159] __x64_sys_setsockopt+0xbd/0x160 [ 613.373846][T10159] ? do_syscall_64+0x9a/0x250 [ 613.378542][T10159] do_syscall_64+0xcd/0x250 [ 613.383068][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.388992][T10159] RIP: 0033:0x7f81a5979e79 [ 613.393414][T10159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.413032][T10159] RSP: 002b:00007f81a66b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 613.421467][T10159] RAX: ffffffffffffffda RBX: 00007f81a5b16130 RCX: 00007f81a5979e79 [ 613.429453][T10159] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000008 [ 613.437432][T10159] RBP: 00007f81a66b0090 R08: 0000000000000aa8 R09: 0000000000000000 [ 613.445413][T10159] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 613.453392][T10159] R13: 0000000000000000 R14: 00007f81a5b16130 R15: 00007ffe819c5118 [ 613.461374][T10159] [ 613.567969][T10154] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 613.628147][ T29] audit: type=1400 audit(1723875075.546:1701): avc: denied { read } for pid=10150 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.691918][ T29] audit: type=1400 audit(1723875075.786:1702): avc: denied { map_create } for pid=10156 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 613.713424][T10155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.764847][ T29] audit: type=1400 audit(1723875075.786:1703): avc: denied { prog_load } for pid=10156 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 613.809475][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.839334][ T29] audit: type=1400 audit(1723875075.796:1704): avc: denied { bpf } for pid=10156 comm="syz.1.920" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.010820][ T29] audit: type=1400 audit(1723875075.796:1705): avc: denied { perfmon } for pid=10156 comm="syz.1.920" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.039646][ T29] audit: type=1400 audit(1723875075.796:1706): avc: denied { create } for pid=10156 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 614.170799][T10170] trusted_key: encrypted_key: insufficient parameters specified [ 614.367943][ T29] audit: type=1400 audit(1723875075.796:1707): avc: denied { setopt } for pid=10156 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 614.476010][ T29] audit: type=1400 audit(1723875076.256:1708): avc: denied { read } for pid=4649 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 614.498541][ T1170] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 614.889316][ T1170] usb 4-1: Using ep0 maxpacket: 16 [ 614.932408][ T1170] usb 4-1: config 1 interface 0 altsetting 142 endpoint 0x81 has invalid maxpacket 1559, setting to 1024 [ 614.994630][ T1170] usb 4-1: config 1 interface 0 altsetting 142 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.042289][ T1170] usb 4-1: config 1 interface 0 has no altsetting 0 [ 615.075883][ T1170] usb 4-1: language id specifier not provided by device, defaulting to English [ 615.093260][ T1170] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.40 [ 615.107593][ T1170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.113975][T10176] overlayfs: missing 'workdir' [ 615.136966][ T1170] usb 4-1: Product: â  [ 615.141939][ T1170] usb 4-1: Manufacturer: 냀媳᫴ꋉ뱥耙ì¢ê¸Žåµ´Æƒá¢šíƒœå·­è°ˆáŽá´»ìƒâ«‚뇡줥䗧୫췂â¼ï’”䊕Ò蘓ϔ淧ê‚ᢩ鼨阡î…蹣쟛刃䈮ࠜ㭧븥詠ⷋꗂå¶ï¶³â¨žá…ë´á›šã¶žì“ ä‚–蕩ϥ幱꽛êœì…Œã´‘ঊé¸ë¡æ¹«à¿€í«ê²§á¢·é¥“ꔲ딹⇥钰뺭ꖮ핊ì¼äŽ¯å©µå—Šï«€ïŽë¤éš¥â¾‚ᆱ嵯魼魲躠穱é˜åµ§à œí«ã¿ªâ³®æˆžáŒ“컋殜⭓涢æ”ࠡ헄 [ 615.203063][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 615.229287][ T1170] usb 4-1: SerialNumber: ⶣ⋮鱘쇹꽄㎸瘺佾枵頔ꖉ毞﵈怟藳綠毭໕櫪滹ç’ヤ䪉韯ប쾟晸洵骥♲魸ꦧâ†ê â²¨ä•Ÿæ¥˜ç¼žãšî¹ºî§ˆî©¸à§žíš™ã©ï¸ê‡‹á˜Ÿã» [ 615.284050][T10162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 615.721724][T10162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.763787][T10162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.988907][ T1170] usbhid 4-1:1.0: can't add hid device: -71 [ 616.012366][ T1170] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 616.117905][ T1170] usb 4-1: USB disconnect, device number 9 [ 616.220588][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 616.975549][ T9] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 616.995042][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.053657][ T9] usb 1-1: config 0 descriptor?? [ 617.085515][ T9] bfusb 1-1:0.0: probe with driver bfusb failed with error -5 [ 618.350842][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 619.827713][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 619.827731][ T29] audit: type=1400 audit(1723875082.486:1763): avc: denied { create } for pid=10204 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 620.267878][ T29] audit: type=1400 audit(1723875082.496:1764): avc: denied { write } for pid=10204 comm="syz.1.932" name="anycast6" dev="proc" ino=4026534053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 620.323955][ T29] audit: type=1400 audit(1723875082.876:1765): avc: denied { create } for pid=10188 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 620.521258][ T29] audit: type=1400 audit(1723875082.986:1766): avc: denied { execute } for pid=10188 comm="syz.0.928" path="/126/cpu.stat" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 622.085594][T10222] trusted_key: encrypted_key: insufficient parameters specified [ 622.095808][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 622.106016][ T5273] usb 1-1: USB disconnect, device number 15 [ 622.209704][ T29] audit: type=1400 audit(1723875084.886:1767): avc: denied { create } for pid=10227 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 622.272658][ T29] audit: type=1400 audit(1723875084.936:1768): avc: denied { create } for pid=10227 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 623.747815][ T29] audit: type=1400 audit(1723875086.416:1769): avc: denied { ioctl } for pid=10227 comm="syz.4.936" path="socket:[33982]" dev="sockfs" ino=33982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 624.028884][ T29] audit: type=1400 audit(1723875086.696:1770): avc: denied { read } for pid=10243 comm="syz.1.941" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 624.210896][T10244] openvswitch: netlink: Missing key (keys=40, expected=80) [ 624.258607][ T29] audit: type=1400 audit(1723875086.696:1771): avc: denied { open } for pid=10243 comm="syz.1.941" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 624.593797][ T29] audit: type=1400 audit(1723875086.896:1772): avc: denied { write } for pid=10243 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 625.586887][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.593318][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.889395][ T29] audit: type=1400 audit(1723875086.896:1773): avc: denied { connect } for pid=10243 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 625.909352][ T29] audit: type=1400 audit(1723875086.896:1774): avc: denied { name_connect } for pid=10243 comm="syz.1.941" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 626.025847][ T29] audit: type=1400 audit(1723875086.926:1775): avc: denied { read write } for pid=10245 comm="syz.2.942" name="vhost-net" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 626.128335][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 626.476657][ T29] audit: type=1400 audit(1723875086.926:1776): avc: denied { open } for pid=10245 comm="syz.2.942" path="/dev/vhost-net" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 626.991085][T10254] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 627.010139][ T29] audit: type=1400 audit(1723875086.926:1777): avc: denied { ioctl } for pid=10245 comm="syz.2.942" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 627.062426][ T29] audit: type=1400 audit(1723875086.956:1778): avc: denied { setopt } for pid=10243 comm="syz.1.941" laddr=::1 lport=40933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 627.535133][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 627.546606][ T29] audit: type=1400 audit(1723875086.956:1779): avc: denied { ioctl } for pid=10243 comm="syz.1.941" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 627.571776][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.589668][ T29] audit: type=1400 audit(1723875086.986:1780): avc: denied { getopt } for pid=10231 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 627.654704][ T29] audit: type=1400 audit(1723875088.616:1781): avc: denied { create } for pid=10245 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 627.710359][ T29] audit: type=1400 audit(1723875088.736:1782): avc: denied { create } for pid=10266 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 629.405469][ T4605] Bluetooth: Wrong link type (-57) [ 634.281929][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 634.281947][ T29] audit: type=1400 audit(1723875096.956:1832): avc: denied { read write } for pid=10306 comm="syz.0.956" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 634.478804][ T29] audit: type=1400 audit(1723875096.956:1833): avc: denied { open } for pid=10306 comm="syz.0.956" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 634.558415][T10307] 9pnet: Could not find request transport: xen [ 635.134086][ T29] audit: type=1400 audit(1723875096.986:1834): avc: denied { read } for pid=10304 comm="syz.1.955" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 635.163075][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.192512][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.210536][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.234845][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.249772][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 635.260097][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.348423][ T29] audit: type=1400 audit(1723875096.986:1835): avc: denied { open } for pid=10304 comm="syz.1.955" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 635.501808][ T29] audit: type=1400 audit(1723875096.996:1836): avc: denied { setopt } for pid=10306 comm="syz.0.956" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 636.531209][ T29] audit: type=1400 audit(1723875097.016:1837): avc: denied { wake_alarm } for pid=10306 comm="syz.0.956" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 636.552326][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.628257][ T29] audit: type=1400 audit(1723875097.026:1838): avc: denied { mounton } for pid=10306 comm="syz.0.956" path="/131/file1" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 636.892403][ T29] audit: type=1400 audit(1723875097.076:1839): avc: denied { write } for pid=10304 comm="syz.1.955" name="fib_triestat" dev="proc" ino=4026533982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 637.461848][ T29] audit: type=1400 audit(1723875097.256:1840): avc: denied { write } for pid=10311 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.489395][ T4605] Bluetooth: hci3: command tx timeout [ 637.510590][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.523064][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.531410][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.542014][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.566463][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.575046][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.629266][ T29] audit: type=1400 audit(1723875097.276:1841): avc: denied { mounton } for pid=10313 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 637.653278][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.877967][T10330] input: syz0 as /devices/virtual/input/input42 [ 638.964418][ T5460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.420380][ T5460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.545757][ T5237] Bluetooth: hci3: command tx timeout [ 639.584843][ T5460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.688435][ T5460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.785999][ T5237] Bluetooth: hci0: command tx timeout [ 640.302333][T10350] 9pnet: Could not find request transport: xen [ 640.312113][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 640.312129][ T29] audit: type=1400 audit(1723875102.986:1875): avc: denied { read } for pid=4881 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 640.529575][ T5460] team0: left allmulticast mode [ 640.534476][ T5460] team_slave_0: left allmulticast mode [ 640.551858][ T5460] team_slave_1: left allmulticast mode [ 640.566738][ T5460] bridge0: port 3(team0) entered disabled state [ 640.612139][ T5460] bridge_slave_1: left allmulticast mode [ 640.628905][ T29] audit: type=1400 audit(1723875103.296:1876): avc: denied { ioctl } for pid=10355 comm="syz.1.966" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35528 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 640.654921][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.666823][ T5460] bridge_slave_1: left promiscuous mode [ 640.684504][T10362] fuse: Bad value for 'fd' [ 640.689448][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.715739][ T5460] bridge_slave_0: left allmulticast mode [ 640.818651][ T5460] bridge_slave_0: left promiscuous mode [ 640.824818][ T29] audit: type=1400 audit(1723875103.346:1877): avc: denied { create } for pid=10359 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 640.877868][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.906806][ T29] audit: type=1400 audit(1723875103.496:1878): avc: denied { setopt } for pid=10359 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 641.624282][ T29] audit: type=1400 audit(1723875104.296:1879): avc: denied { mount } for pid=10372 comm="syz.0.968" name="/" dev="autofs" ino=34316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 641.630785][ T5237] Bluetooth: hci3: command tx timeout [ 641.657326][T10373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.688571][T10373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.704077][T10373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.718032][T10373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.778777][ T29] audit: type=1400 audit(1723875104.446:1880): avc: denied { getopt } for pid=10372 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 641.868135][ T5237] Bluetooth: hci0: command tx timeout [ 641.888113][ T29] audit: type=1400 audit(1723875104.546:1881): avc: denied { ioctl } for pid=10372 comm="syz.0.968" path="socket:[34331]" dev="sockfs" ino=34331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 642.017086][ T5460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.042359][ T5460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.060912][ T5460] bond0 (unregistering): Released all slaves [ 642.148321][T10360] netlink: 'syz.4.967': attribute type 4 has an invalid length. [ 643.241664][ T29] audit: type=1400 audit(1723875105.916:1882): avc: denied { unmount } for pid=7170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 643.330055][ T29] audit: type=1400 audit(1723875106.006:1883): avc: denied { create } for pid=10385 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 643.688891][T10329] chnl_net:caif_netlink_parms(): no params data found [ 643.716598][ T5237] Bluetooth: hci3: command tx timeout [ 643.750415][T10313] chnl_net:caif_netlink_parms(): no params data found [ 643.874304][ T5460] hsr_slave_0: left promiscuous mode [ 643.979342][ T5237] Bluetooth: hci0: command tx timeout [ 644.108415][ T29] audit: type=1400 audit(1723875106.616:1884): avc: denied { read } for pid=10377 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.188401][ T5460] hsr_slave_1: left promiscuous mode [ 644.229930][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.249457][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.310811][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.318249][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.385986][ T5460] veth1_macvtap: left promiscuous mode [ 644.391851][ T5460] veth0_macvtap: left promiscuous mode [ 644.397567][ T5460] veth1_vlan: left promiscuous mode [ 644.425664][ T5460] veth0_vlan: left promiscuous mode [ 646.099647][ T5237] Bluetooth: hci0: command tx timeout [ 648.043241][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 648.043261][ T29] audit: type=1400 audit(1723875110.696:1894): avc: denied { create } for pid=10423 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.068864][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.108162][ T29] audit: type=1400 audit(1723875110.746:1895): avc: denied { bind } for pid=10423 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.129398][ T29] audit: type=1400 audit(1723875110.776:1896): avc: denied { connect } for pid=10423 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.199470][ T29] audit: type=1400 audit(1723875110.866:1897): avc: denied { connect } for pid=10419 comm="syz.0.977" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 648.236806][ T29] audit: type=1400 audit(1723875110.876:1898): avc: denied { ioctl } for pid=10419 comm="syz.0.977" path="socket:[35677]" dev="sockfs" ino=35677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 648.506976][ T29] audit: type=1400 audit(1723875111.166:1899): avc: denied { name_bind } for pid=10423 comm="syz.1.978" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 648.531527][ T29] audit: type=1400 audit(1723875111.166:1900): avc: denied { node_bind } for pid=10423 comm="syz.1.978" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 649.670548][ T5460] team_slave_1 (unregistering): left promiscuous mode [ 649.695292][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 649.777669][ T5460] team_slave_0 (unregistering): left promiscuous mode [ 649.787577][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 649.809256][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 650.834857][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.842317][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.849811][T10313] bridge_slave_0: entered allmulticast mode [ 650.856862][T10313] bridge_slave_0: entered promiscuous mode [ 651.537960][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.546476][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.564022][T10329] bridge_slave_0: entered allmulticast mode [ 651.578188][T10329] bridge_slave_0: entered promiscuous mode [ 651.600319][T10450] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 651.629375][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.636553][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.680193][T10313] bridge_slave_1: entered allmulticast mode [ 651.688002][T10313] bridge_slave_1: entered promiscuous mode [ 651.738928][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.758763][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.788452][T10329] bridge_slave_1: entered allmulticast mode [ 651.809382][T10329] bridge_slave_1: entered promiscuous mode [ 652.000965][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.057887][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.093098][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.393422][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.515753][T10329] team0: Port device team_slave_0 added [ 652.564349][T10329] team0: Port device team_slave_1 added [ 652.647807][ T29] audit: type=1400 audit(1723875115.316:1901): avc: denied { setopt } for pid=10460 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 652.701966][T10313] team0: Port device team_slave_0 added [ 652.802544][T10313] team0: Port device team_slave_1 added [ 652.875557][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.897032][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.979280][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.043867][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.089631][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.115538][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.168115][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.638672][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.719982][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.746096][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.933279][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.947239][ T5237] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4 [ 653.959717][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.037923][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.063889][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.149022][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.448049][T10329] hsr_slave_0: entered promiscuous mode [ 655.462457][T10329] hsr_slave_1: entered promiscuous mode [ 655.495920][T10329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.533764][T10482] input: syz0 as /devices/virtual/input/input43 [ 655.622884][T10329] Cannot create hsr debugfs directory [ 656.142519][ T5460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.296127][T10313] hsr_slave_0: entered promiscuous mode [ 656.313703][T10313] hsr_slave_1: entered promiscuous mode [ 656.348919][T10313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.367623][T10313] Cannot create hsr debugfs directory [ 656.484490][ T5460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.862256][ T5460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.606565][ T29] audit: type=1400 audit(1723875120.266:1902): avc: denied { read } for pid=10490 comm="syz.4.990" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 657.629706][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.646380][ T29] audit: type=1400 audit(1723875120.266:1903): avc: denied { open } for pid=10490 comm="syz.4.990" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 657.688856][ T5460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.934133][ T29] audit: type=1400 audit(1723875120.606:1904): avc: denied { create } for pid=10494 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 658.126045][ T29] audit: type=1400 audit(1723875120.626:1905): avc: denied { connect } for pid=10494 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 658.145491][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.169530][ T29] audit: type=1400 audit(1723875120.626:1906): avc: denied { write } for pid=10494 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 659.372663][ T5460] bridge_slave_1: left allmulticast mode [ 659.378342][ T5460] bridge_slave_1: left promiscuous mode [ 659.384093][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 659.389572][ T5276] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 659.425030][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.446135][ T5460] bridge_slave_0: left allmulticast mode [ 659.451828][ T5460] bridge_slave_0: left promiscuous mode [ 659.457536][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.621926][ T9] usb 5-1: config 0 has an invalid interface number: 217 but max is 1 [ 659.630655][ T9] usb 5-1: config 0 has no interface number 1 [ 659.657157][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.672714][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 659.683232][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.693519][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.726096][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 659.727007][ T9] usb 5-1: config 0 descriptor?? [ 659.737291][ T5276] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 659.759049][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.791701][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 659.805048][ T29] audit: type=1400 audit(1723875122.476:1907): avc: denied { write } for pid=4649 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.840330][ T5276] usb 2-1: config 0 descriptor?? [ 659.867880][ T29] audit: type=1400 audit(1723875122.476:1908): avc: denied { remove_name } for pid=4649 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.927191][ T29] audit: type=1400 audit(1723875122.476:1909): avc: denied { rename } for pid=4649 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 659.968309][ T29] audit: type=1400 audit(1723875122.476:1910): avc: denied { add_name } for pid=4649 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.036178][ T29] audit: type=1400 audit(1723875122.476:1911): avc: denied { unlink } for pid=4649 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 660.076043][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.148282][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.263282][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 660.297261][ T9] gspca_sn9c20x: Device initialization failed [ 660.338665][ T9] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 660.390201][ T9] usb 5-1: USB disconnect, device number 3 [ 660.527898][ T5460] dvmrp5 (unregistering): left allmulticast mode [ 660.855429][ T5460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.867944][ T5460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.885888][ T5460] bond0 (unregistering): Released all slaves [ 661.447216][T10514] ebt_among: src integrity fail: 300 [ 662.364509][ T5276] Bluetooth: Can't get state to change to load configuration err [ 662.375621][ T5276] Bluetooth: Loading sysconfig file failed [ 662.383120][ T5276] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 662.404315][ T5460] hsr_slave_0: left promiscuous mode [ 662.424803][ T5276] usb 2-1: USB disconnect, device number 18 [ 662.505857][ T5460] hsr_slave_1: left promiscuous mode [ 662.691097][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.864439][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 662.864482][ T29] audit: type=1400 audit(1723875125.436:1918): avc: denied { create } for pid=10521 comm="syz.0.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 663.192105][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.227913][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.609315][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.712972][ T5460] veth1_macvtap: left promiscuous mode [ 663.720019][ T5460] veth0_macvtap: left promiscuous mode [ 663.728390][ T5460] veth1_vlan: left promiscuous mode [ 663.762012][ T29] audit: type=1400 audit(1723875126.396:1919): avc: denied { getopt } for pid=10520 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 663.782723][ T5460] veth0_vlan: left promiscuous mode [ 664.081100][ T29] audit: type=1400 audit(1723875126.516:1920): avc: denied { append } for pid=4649 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 664.207876][ T29] audit: type=1400 audit(1723875126.526:1921): avc: denied { create } for pid=10527 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 664.304559][ T29] audit: type=1400 audit(1723875126.556:1922): avc: denied { read write } for pid=5392 comm="syz-executor" name="loop1" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.328803][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.510582][ T29] audit: type=1400 audit(1723875126.556:1923): avc: denied { open } for pid=5392 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.534682][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.552837][ T29] audit: type=1400 audit(1723875126.556:1924): avc: denied { ioctl } for pid=5392 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.579831][ T29] audit: type=1400 audit(1723875126.586:1925): avc: denied { execmem } for pid=10527 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 664.619312][ T29] audit: type=1400 audit(1723875126.636:1926): avc: denied { write } for pid=10532 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 664.660905][ T29] audit: type=1400 audit(1723875126.696:1927): avc: denied { read } for pid=10534 comm="syz.1.1003" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 665.125884][T10542] ebt_among: src integrity fail: 300 [ 665.409565][T10545] ebt_among: src integrity fail: 300 [ 666.207617][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 666.317697][ T5237] Bluetooth: hci5: unexpected event 0x08 length: 78 > 4 [ 666.323251][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 668.332053][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 668.332072][ T29] audit: type=1400 audit(1723875131.006:1958): avc: denied { read } for pid=4881 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 668.477004][ T5237] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 668.872568][T10329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.905699][T10329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.125172][T10329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 670.975197][T10329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 670.982484][ T29] audit: type=1400 audit(1723875132.056:1959): avc: denied { create } for pid=10576 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 671.019032][T10581] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 671.128898][ T29] audit: type=1400 audit(1723875132.086:1960): avc: denied { getopt } for pid=10576 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 671.175064][ T29] audit: type=1400 audit(1723875133.686:1961): avc: denied { create } for pid=10329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 671.226267][ T29] audit: type=1400 audit(1723875133.686:1962): avc: denied { write } for pid=10329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 671.331911][ T29] audit: type=1400 audit(1723875133.686:1963): avc: denied { read } for pid=10329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 672.374056][ T29] audit: type=1400 audit(1723875133.706:1964): avc: denied { append } for pid=4649 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 672.535660][ T29] audit: type=1400 audit(1723875133.776:1965): avc: denied { read write } for pid=7170 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.738407][ T29] audit: type=1400 audit(1723875133.796:1967): avc: denied { ioctl } for pid=5392 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.852961][ T29] audit: type=1400 audit(1723875133.836:1968): avc: denied { execmem } for pid=10575 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 673.348801][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 673.365453][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 673.365470][ T29] audit: type=1400 audit(1723875136.026:2002): avc: denied { create } for pid=10595 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 673.453652][T10329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.481891][T10329] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.494834][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.499268][ T29] audit: type=1400 audit(1723875136.026:2003): avc: denied { map_read map_write } for pid=10595 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 673.502036][ T8322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.530502][ T29] audit: type=1400 audit(1723875136.036:2004): avc: denied { setopt } for pid=10595 comm="syz.0.1017" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.570375][ T29] audit: type=1400 audit(1723875136.086:2005): avc: denied { ioctl } for pid=10592 comm="syz.4.1018" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 673.653377][ T29] audit: type=1400 audit(1723875136.096:2006): avc: denied { write } for pid=10595 comm="syz.0.1017" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.690219][ T29] audit: type=1400 audit(1723875136.276:2007): avc: denied { connect } for pid=10595 comm="syz.0.1017" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.910595][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.917780][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.126756][ T29] audit: type=1400 audit(1723875136.766:2008): avc: denied { module_request } for pid=10329 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 674.206297][ T29] audit: type=1400 audit(1723875136.876:2009): avc: denied { sys_module } for pid=10329 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 674.459724][ T29] audit: type=1400 audit(1723875136.926:2010): avc: denied { write } for pid=10602 comm="syz.0.1019" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 678.793268][ T29] audit: type=1400 audit(1723875137.226:2011): avc: denied { name_bind } for pid=10609 comm="syz.1.1021" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 678.857492][T10313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 679.037452][ T29] audit: type=1400 audit(1723875137.226:2012): avc: denied { node_bind } for pid=10609 comm="syz.1.1021" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 679.092886][T10313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.108229][ T29] audit: type=1400 audit(1723875137.556:2013): avc: denied { create } for pid=10609 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 679.155797][T10313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.204367][T10313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 679.252628][T10329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.961226][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.295528][T10329] veth0_vlan: entered promiscuous mode [ 680.364324][T10329] veth1_vlan: entered promiscuous mode [ 680.466874][ T29] audit: type=1400 audit(1723875143.136:2014): avc: denied { create } for pid=10623 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 680.477519][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.518846][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.525972][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.557895][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.565029][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.598163][T10313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.617916][T10313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.659088][ T29] audit: type=1400 audit(1723875143.326:2015): avc: denied { create } for pid=10623 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.304966][T10329] veth0_macvtap: entered promiscuous mode [ 681.318485][ T29] audit: type=1400 audit(1723875143.326:2016): avc: denied { read } for pid=10623 comm="syz.1.1023" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 681.364173][T10329] veth1_macvtap: entered promiscuous mode [ 681.468514][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.489396][ T29] audit: type=1400 audit(1723875143.336:2017): avc: denied { open } for pid=10623 comm="syz.1.1023" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 681.533891][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.582723][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.603040][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.626458][ T29] audit: type=1400 audit(1723875143.336:2018): avc: denied { setopt } for pid=10623 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.632482][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.689870][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.759430][ T29] audit: type=1400 audit(1723875143.336:2019): avc: denied { ioctl } for pid=10623 comm="syz.1.1023" path="socket:[36600]" dev="sockfs" ino=36600 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.815116][T10329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.872812][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.885867][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.902460][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.930300][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.956758][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.988141][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.022632][T10329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.053454][ T29] audit: type=1400 audit(1723875144.726:2020): avc: denied { create } for pid=10630 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 682.084645][T10329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.117636][T10329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.153020][T10329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.166030][T10329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.245522][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.677456][T10313] veth0_vlan: entered promiscuous mode [ 682.725095][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.749679][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.773461][T10313] veth1_vlan: entered promiscuous mode [ 683.055781][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.073236][T10313] veth0_macvtap: entered promiscuous mode [ 683.088702][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.163646][T10313] veth1_macvtap: entered promiscuous mode [ 683.233272][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 683.274248][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.028115][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.051916][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.079391][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.122809][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.146577][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 684.146593][ T29] audit: type=1400 audit(1723875146.816:2035): avc: denied { write } for pid=10646 comm="syz.0.1028" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 684.151539][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.208259][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.232781][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.257132][ T29] audit: type=1326 audit(1723875146.906:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.304195][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.358788][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.431288][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.458802][ T29] audit: type=1326 audit(1723875146.906:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.483134][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.519001][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.519293][ T29] audit: type=1326 audit(1723875146.906:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.552210][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.560124][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.639355][ T29] audit: type=1326 audit(1723875146.906:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.647416][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.670747][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.674450][ T29] audit: type=1326 audit(1723875146.906:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.765629][ T29] audit: type=1326 audit(1723875146.906:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.788980][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.867815][ T29] audit: type=1326 audit(1723875146.906:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 684.880469][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.891208][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.005161][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.005192][ T29] audit: type=1326 audit(1723875146.906:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 685.038381][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.082154][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.085229][ T29] audit: type=1326 audit(1723875146.906:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9164d79e79 code=0x7ffc0000 [ 685.290961][T10313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.321915][T10313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.346602][T10313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.368754][T10313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.285150][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.291547][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.336507][ T8308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.375157][ T8308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.568685][ T8341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.579963][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 689.579979][ T29] audit: type=1400 audit(1723875152.256:2062): avc: denied { write } for pid=10678 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 689.580454][ T8341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.606973][ T5237] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4 [ 689.813930][ T29] audit: type=1400 audit(1723875152.476:2063): avc: denied { write } for pid=10697 comm="syz.4.1039" name="001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 690.759303][ T29] audit: type=1400 audit(1723875152.566:2064): avc: denied { create } for pid=10700 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 690.931928][ T5237] Bluetooth: hci1: link tx timeout [ 690.938253][ T5237] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 691.542998][ T29] audit: type=1400 audit(1723875154.216:2065): avc: denied { read } for pid=10715 comm="syz.0.1042" name="vhost-net" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 691.905940][ T29] audit: type=1400 audit(1723875154.246:2066): avc: denied { open } for pid=10715 comm="syz.0.1042" path="/dev/vhost-net" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 692.007746][ T29] audit: type=1400 audit(1723875154.276:2067): avc: denied { ioctl } for pid=10715 comm="syz.0.1042" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 692.286573][ T29] audit: type=1400 audit(1723875154.926:2068): avc: denied { create } for pid=10715 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 692.319084][ T55] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 692.589308][ T29] audit: type=1400 audit(1723875155.186:2069): avc: denied { create } for pid=10715 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 692.847171][ T29] audit: type=1400 audit(1723875155.356:2070): avc: denied { unmount } for pid=10313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 693.018860][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 693.232722][ T29] audit: type=1400 audit(1723875155.516:2071): avc: denied { write } for pid=10715 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 694.399521][ T5237] Bluetooth: hci3: command tx timeout [ 694.940441][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 694.940455][ T29] audit: type=1400 audit(1723875156.936:2075): avc: denied { bind } for pid=10747 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 695.082081][ T29] audit: type=1400 audit(1723875156.946:2076): avc: denied { write } for pid=10747 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 695.984778][T10765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1054'. [ 696.006177][T10765] netlink: 'syz.3.1054': attribute type 15 has an invalid length. [ 696.032546][T10765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 696.042778][ T29] audit: type=1400 audit(1723875158.696:2077): avc: denied { ioctl } for pid=10760 comm="syz.2.1053" path="/dev/cec2" dev="devtmpfs" ino=880 ioctlcmd=0x6105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 696.103894][ T29] audit: type=1400 audit(1723875158.756:2078): avc: denied { write } for pid=10761 comm="syz.3.1054" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 696.256395][ T29] audit: type=1400 audit(1723875158.926:2079): avc: denied { map } for pid=10764 comm="syz.1.1052" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 696.514324][ T29] audit: type=1400 audit(1723875158.966:2080): avc: denied { read write } for pid=10764 comm="syz.1.1052" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 698.328308][ T29] audit: type=1400 audit(1723875159.296:2081): avc: denied { getopt } for pid=10769 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 698.462228][T10775] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 698.589369][ T29] audit: type=1400 audit(1723875161.066:2082): avc: denied { write } for pid=10772 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.609795][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.747776][ T29] audit: type=1400 audit(1723875161.066:2083): avc: denied { read } for pid=10772 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.829686][ T29] audit: type=1400 audit(1723875161.216:2084): avc: denied { read write } for pid=10313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.300424][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 699.989690][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 699.989734][ T29] audit: type=1400 audit(1723875162.516:2112): avc: denied { create } for pid=10786 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 700.016171][ T29] audit: type=1400 audit(1723875162.526:2113): avc: denied { ioctl } for pid=10786 comm="syz.0.1059" path="socket:[38468]" dev="sockfs" ino=38468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 700.640730][ T29] audit: type=1400 audit(1723875163.286:2114): avc: denied { setopt } for pid=10790 comm="syz.2.1060" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 700.729960][T10798] ebt_among: src integrity fail: 300 [ 701.148205][ T29] audit: type=1400 audit(1723875163.666:2115): avc: denied { read } for pid=10800 comm="syz.0.1062" dev="nsfs" ino=4026533228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 701.465862][ T29] audit: type=1400 audit(1723875163.666:2116): avc: denied { open } for pid=10800 comm="syz.0.1062" path="net:[4026533228]" dev="nsfs" ino=4026533228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 701.506069][ T29] audit: type=1400 audit(1723875163.756:2117): avc: denied { create } for pid=10800 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 701.639321][ T29] audit: type=1400 audit(1723875164.096:2118): avc: denied { read write } for pid=10800 comm="syz.0.1062" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 701.684807][ T29] audit: type=1400 audit(1723875164.096:2119): avc: denied { open } for pid=10800 comm="syz.0.1062" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 701.728939][ T29] audit: type=1400 audit(1723875164.106:2120): avc: denied { map } for pid=10800 comm="syz.0.1062" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 701.923569][ T29] audit: type=1400 audit(1723875164.106:2121): avc: denied { execute } for pid=10800 comm="syz.0.1062" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 809.559229][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 809.566240][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10881/1:b..l [ 809.574876][ C0] rcu: (detected by 0, t=10502 jiffies, g=56045, q=436 ncpus=2) [ 809.582610][ C0] task:syz.0.1069 state:R running task stack:24816 pid:10881 tgid:10879 ppid:7170 flags:0x00004002 [ 809.595581][ C0] Call Trace: [ 809.598877][ C0] [ 809.601825][ C0] __schedule+0xe37/0x5490 [ 809.606277][ C0] ? hlock_class+0x11/0x130 [ 809.610819][ C0] ? __pfx___schedule+0x10/0x10 [ 809.615693][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 809.620926][ C0] preempt_schedule_irq+0x51/0x90 [ 809.625995][ C0] irqentry_exit+0x36/0x90 [ 809.630445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 809.636453][ C0] RIP: 0010:kthread_blkcg+0x1d/0x160 [ 809.641767][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 53 e8 95 f7 32 00 48 b8 00 00 00 00 00 fc ff df 65 48 8b 1d 63 5a ac 7e <48> 8d 7b 2c 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 [ 809.661398][ C0] RSP: 0018:ffffc90003bf7310 EFLAGS: 00000293 [ 809.667485][ C0] RAX: dffffc0000000000 RBX: ffff88802b7d5a00 RCX: ffffffff846bce6d [ 809.675470][ C0] RDX: ffff88802b7d5a00 RSI: ffffffff8157808b RDI: ffff88802efa9688 [ 809.683456][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 809.691440][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802efa96c8 [ 809.699424][ C0] R13: 0000000000000004 R14: 0000000000000801 R15: 0000000000000001 [ 809.707414][ C0] ? bio_associate_blkg+0x15d/0x2a0 [ 809.712647][ C0] ? kthread_blkcg+0xb/0x160 [ 809.717261][ C0] bio_associate_blkg+0x1d4/0x2a0 [ 809.722318][ C0] bio_init+0x2ae/0x5a0 [ 809.726502][ C0] bio_alloc_bioset+0x2c5/0x8b0 [ 809.731395][ C0] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 809.736807][ C0] ? wb_update_dirty_ratelimit+0x1a1/0x7c0 [ 809.742662][ C0] submit_bh_wbc+0x280/0x730 [ 809.747292][ C0] __block_write_full_folio+0x729/0xe00 [ 809.752883][ C0] block_write_full_folio+0x342/0x400 [ 809.758271][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 809.763668][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 809.769062][ C0] ? __pfx_block_write_full_folio+0x10/0x10 [ 809.774992][ C0] write_cache_pages+0xb0/0x130 [ 809.779880][ C0] ? __pfx_write_cache_pages+0x10/0x10 [ 809.785373][ C0] ? lock_acquire+0x1b1/0x560 [ 809.790073][ C0] ? find_held_lock+0x2d/0x110 [ 809.794870][ C0] blkdev_writepages+0xa4/0xf0 [ 809.799660][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 809.805143][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 809.810199][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 809.815427][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 809.820912][ C0] do_writepages+0x1a3/0x7f0 [ 809.825529][ C0] ? __pfx_do_writepages+0x10/0x10 [ 809.830660][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 809.835707][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 809.840762][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 809.845988][ C0] ? _raw_spin_unlock+0x28/0x50 [ 809.850863][ C0] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 809.856865][ C0] filemap_fdatawrite_wbc+0x148/0x1c0 [ 809.862259][ C0] __filemap_fdatawrite_range+0xba/0x100 [ 809.867924][ C0] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 809.874199][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.879599][ C0] ? locks_check_ctx_file_list+0x1d/0x330 [ 809.885350][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 809.890577][ C0] filemap_write_and_wait_range+0xa3/0x130 [ 809.896411][ C0] bdev_release+0x4eb/0x6f0 [ 809.900937][ C0] ? task_work_run+0x126/0x250 [ 809.905728][ C0] ? evm_file_release+0xd6/0x1d0 [ 809.910696][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 809.915915][ C0] blkdev_release+0x15/0x20 [ 809.920444][ C0] __fput+0x408/0xbb0 [ 809.924454][ C0] task_work_run+0x14e/0x250 [ 809.929072][ C0] ? __pfx_task_work_run+0x10/0x10 [ 809.934208][ C0] ? switch_task_namespaces+0xeb/0x100 [ 809.939702][ C0] do_exit+0xaa3/0x2bb0 [ 809.943881][ C0] ? get_signal+0x8f2/0x2770 [ 809.948502][ C0] ? __pfx_do_exit+0x10/0x10 [ 809.953111][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 809.958163][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.963564][ C0] do_group_exit+0xd3/0x2a0 [ 809.968087][ C0] get_signal+0x25fd/0x2770 [ 809.972626][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 809.977941][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.983167][ C0] ? __pfx_get_signal+0x10/0x10 [ 809.988046][ C0] ? __pfx_do_futex+0x10/0x10 [ 809.992745][ C0] ? fput+0x32/0x390 [ 809.996665][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 810.002238][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 810.008424][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 810.014084][ C0] do_syscall_64+0xda/0x250 [ 810.018618][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.024546][ C0] RIP: 0033:0x7f3875579e79 [ 810.028976][ C0] RSP: 002b:00007f387631f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 810.037409][ C0] RAX: fffffffffffffe00 RBX: 00007f3875716060 RCX: 00007f3875579e79 [ 810.045396][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3875716060 [ 810.053382][ C0] RBP: 00007f3875716058 R08: 0000000000000000 R09: 0000000000000000 [ 810.061365][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3875716064 [ 810.069361][ C0] R13: 0000000000000000 R14: 00007ffdbaf0b1f0 R15: 00007ffdbaf0b2d8 [ 810.077351][ C0] [ 810.080390][ C0] rcu: rcu_preempt kthread starved for 10553 jiffies! g56045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 810.091601][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 810.101576][ C0] rcu: RCU grace-period kthread stack dump: [ 810.107470][ C0] task:rcu_preempt state:R running task stack:27312 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 810.119227][ C0] Call Trace: [ 810.122515][ C0] [ 810.125457][ C0] __schedule+0xe37/0x5490 [ 810.129902][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 810.135130][ C0] ? __pfx___schedule+0x10/0x10 [ 810.140005][ C0] ? schedule+0x298/0x350 [ 810.144359][ C0] ? __pfx_lock_release+0x10/0x10 [ 810.149406][ C0] ? __pfx___mod_timer+0x10/0x10 [ 810.154369][ C0] ? lock_acquire+0x1b1/0x560 [ 810.159064][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 810.164550][ C0] schedule+0xe7/0x350 [ 810.168640][ C0] schedule_timeout+0x136/0x2a0 [ 810.173511][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 810.178899][ C0] ? __pfx_process_timeout+0x10/0x10 [ 810.184204][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 810.190049][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 810.195533][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 810.200317][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 810.205622][ C0] ? rcu_gp_init+0xc82/0x1630 [ 810.210315][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 810.215538][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 810.221374][ C0] rcu_gp_kthread+0x271/0x380 [ 810.226070][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 810.231296][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.236518][ C0] ? __kthread_parkme+0x148/0x220 [ 810.241576][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 810.246798][ C0] kthread+0x2c1/0x3a0 [ 810.250886][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.256109][ C0] ? __pfx_kthread+0x10/0x10 [ 810.260713][ C0] ret_from_fork+0x45/0x80 [ 810.265161][ C0] ? __pfx_kthread+0x10/0x10 [ 810.269771][ C0] ret_from_fork_asm+0x1a/0x30 [ 810.274568][ C0] [ 810.277597][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 810.283924][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 810.294271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 810.304339][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 810.309655][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 88 c7 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 38 e8 aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 810.329285][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 810.335371][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b10f699 [ 810.343359][ C0] RDX: 0000000000000001 RSI: ffff888019e9f800 RDI: ffff888019e9f864 [ 810.351342][ C0] RBP: ffff888019e9f864 R08: 0000000000000001 R09: ffffed1017246fd9 [ 810.359340][ C0] R10: ffff8880b9237ecb R11: 0000000000000000 R12: ffff888019b0d800 [ 810.367329][ C0] R13: ffffffff8e9520c0 R14: 0000000000000000 R15: 0000000000000000 [ 810.375311][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 810.384273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.390870][ C0] CR2: 000000110c361d63 CR3: 0000000024564000 CR4: 00000000003506f0 [ 810.398855][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.406833][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.414819][ C0] Call Trace: [ 810.418106][ C0] [ 810.420958][ C0] ? show_regs+0x8c/0xa0 [ 810.425232][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 810.431582][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 810.436810][ C0] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 810.442302][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 810.447959][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 810.454054][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 810.460501][ C0] ? hrtimer_run_queues+0x97/0x450 [ 810.465992][ C0] ? update_process_times+0x175/0x220 [ 810.471390][ C0] ? __pfx_update_process_times+0x10/0x10 [ 810.477133][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 810.482624][ C0] ? update_wall_time+0x1c/0x40 [ 810.487494][ C0] ? tick_nohz_handler+0x376/0x530 [ 810.492632][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 810.498119][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 810.503520][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 810.509273][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 810.515366][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 810.520507][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 810.526680][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 810.532510][ C0] [ 810.535448][ C0] [ 810.538391][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 810.544567][ C0] ? ct_kernel_exit+0x139/0x190 [ 810.549448][ C0] ? acpi_safe_halt+0x1a/0x20 [ 810.554155][ C0] acpi_idle_enter+0xc5/0x160 [ 810.558862][ C0] cpuidle_enter_state+0x85/0x500 [ 810.563913][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 810.569753][ C0] cpuidle_enter+0x4e/0xa0 [ 810.574197][ C0] do_idle+0x313/0x3f0 [ 810.578295][ C0] ? __pfx_do_idle+0x10/0x10 [ 810.582904][ C0] cpu_startup_entry+0x4f/0x60 [ 810.587690][ C0] rest_init+0x16b/0x2b0 [ 810.591949][ C0] ? acpi_subsystem_init+0x133/0x180 [ 810.597256][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 810.602824][ C0] start_kernel+0x3df/0x4c0 [ 810.607352][ C0] x86_64_start_reservations+0x18/0x30 [ 810.612829][ C0] x86_64_start_kernel+0xb2/0xc0 [ 810.617788][ C0] common_startup_64+0x13e/0x148 [ 810.622754][ C0]