last executing test programs: 22.004639455s ago: executing program 4 (id=791): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000060000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='mm_page_free\x00', r2}, 0x10) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) socket$inet6(0xa, 0x6, 0x2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES32=r4, @ANYBLOB="50c0a79da426b58c17ab3db679435f71dd680d7df6f351a3185cda16b539f0961371eadc158f12dcd58bf5d5a39da8b88fcdecbb2fcaeab51f15e506228a9f77d34905bd8a2a1d96ba1687bbb5e0b2748ece785f249f7ab5c698fbc71a545ae93cc2addb9fbe0521c7ca798a46752c38a4214bd49a91c33fb5b076ee06da38c5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21}, 0x90) ioprio_get$uid(0x3, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 16.491771125s ago: executing program 4 (id=804): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x80086601, 0x0) 16.075983482s ago: executing program 4 (id=808): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 15.787563936s ago: executing program 1 (id=811): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) 15.673668951s ago: executing program 4 (id=812): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x0, 0xff, 0x2}, 0x20) 15.404663027s ago: executing program 1 (id=814): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x31, 0x0, &(0x7f0000000040)) 15.003580078s ago: executing program 4 (id=816): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x1269, &(0x7f0000001080)) 14.767461739s ago: executing program 1 (id=818): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) getsockopt$MRT(r0, 0x0, 0xd1, 0x0, 0x0) 14.58063471s ago: executing program 4 (id=820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1914aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000d00000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048020200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccd700000000001c000400070000000000000000000000000000000000000000000000e7662d7b88fed7249af44effb0603567d6e23ea3c2029caaeaa6bd9d19ef13c97951b17eba9d83573373ae652af51796b8a5f4a516763f46724d6bd30f6617168522052e1426e73091bad271c5f78e474d0dd6eff879f6d14623a389e799c64b34546bb7e7966305a5e737b7f7d68640199fb29e51e9b0bc25ea676d850f82ffec51"], 0x154}}, 0x0) r1 = syz_usbip_server_init(0x3) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x309, 0x0, 0x5, 0x0, 0x0, @remote}, 0x10) write$usbip_server(r1, &(0x7f0000000980)=@ret_submit={{0x3, 0x3, 0x0, 0x1, 0x1}, 0x10000, 0xc5, 0x107, 0x17, 0x2, 0x0, "d9ea674cb745f1030ee2135d07ef8da5916b1a3650a15dec672c3b254efc6809b973784cc31f4486f8331acde30b7866643ed73955b6949f82a02182fd6ce9b5b9f27eb889dfd6de034c7862365a46a75c199e680c6b32929cfb93a21f710354bd1dd8124f4660d6179a4dce7c5a9fc05fad3451e852ac0747da2c25508c0db13eefa3d6da1f42a44bbdaaec8841151e5af587790101e3a77a9a60b0417788e765f42a8652406f6174bd9a076e9f0c973006406aff127de33767fae5ff2d4eb580847ee4fc", [{0x4, 0x2, 0x1, 0x1ff}, {0x7, 0x5}, {0x1, 0xffff, 0x8, 0x3}, {0xc0, 0xfff, 0x2, 0x7ff}, {0x17cc, 0xffffffc1, 0x6, 0x1}, {0x4dab, 0x1, 0xa3d, 0x49}, {0x8000, 0x8, 0x7, 0x5c}, {0x10001, 0x20, 0xbd, 0x100}, {0x90c9, 0x1, 0x52c7, 0xfff}, {0x9, 0x0, 0x2, 0x20}, {0xffff, 0x1, 0x0, 0xfffffff9}, {0x9, 0xfff, 0x9, 0x9}, {0x8, 0x9, 0x1cf, 0x6}, {0x5b6, 0x4, 0x10100, 0x10000}, {0xfff, 0xd7, 0x40, 0xf14}, {0xe8d7, 0x20, 0x0, 0x9}, {0x4, 0xd46d, 0x1c, 0x8}, {0xfff, 0x8, 0x6, 0x3f}, {0xffffffff, 0x0, 0x8000, 0x1000}, {0xfffffffc, 0x1, 0x361, 0x6}, {0xfffffffd, 0x7, 0x2, 0x1}, {0x0, 0x9, 0x4, 0x101}, {0x7, 0x89c, 0x5f2c220d, 0x5}]}, 0x265) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000011c0)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220100000004164a5c954f829439e9c538cd"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x0, 0xffdfffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="14", 0x1, 0x4011000bffd) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 14.376226241s ago: executing program 1 (id=823): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 14.214626632s ago: executing program 1 (id=826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x125) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 14.121602008s ago: executing program 1 (id=827): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000002200)="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"/3584, 0xe00) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x1000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x10000810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000005300000008000300", @ANYRES32=r6], 0x30}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002"]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000030101040000000000000000020000002c000280140001800800010000080001080002001b1414aa0c00028005000100000000000600034000000000"], 0x40}}, 0x0) unlink(&(0x7f0000000000)='./file1\x00') io_setup(0x3, &(0x7f00000003c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r11, 0x567, 0x0, 0x0, 0x0, 0x0) 6.85314956s ago: executing program 3 (id=870): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610040000109022d0101100000000904000003fe03010009cd8d1f0039830000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 6.756105292s ago: executing program 2 (id=872): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) getsockopt$MRT(r0, 0x0, 0xd1, 0x0, 0x0) 6.688679003s ago: executing program 2 (id=873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x61) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)=' ', 0x1, 0x4044841, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@empty}, {}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902"], 0x0) socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 5.54031169s ago: executing program 0 (id=877): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 5.510809552s ago: executing program 0 (id=878): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x1f5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000180)=""/192, 0xc0}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 4.564535633s ago: executing program 3 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\t'}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 4.373745048s ago: executing program 3 (id=881): openat$capi20(0xffffffffffffff9c, 0x0, 0x501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000280)={0x18, r4, 0x2, 0x0, &(0x7f0000000200)=[{0x0, 0x5}, {0x6, 0x7}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) 2.952058459s ago: executing program 2 (id=883): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) getsockopt$MRT(r0, 0x0, 0xd1, 0x0, 0x0) 2.950341285s ago: executing program 3 (id=884): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000580)=ANY=[@ANYRES16=r0]) 2.945847755s ago: executing program 0 (id=885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) fchown(r0, 0x0, 0x0) 2.770418971s ago: executing program 2 (id=886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000100), 0x18) 2.705195371s ago: executing program 0 (id=887): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.531721933s ago: executing program 2 (id=888): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 2.45142925s ago: executing program 0 (id=889): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610040000109022d0101100000000904000003fe03010009cd8d1f0039830000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 2.350121509s ago: executing program 3 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\t'}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 2.312636949s ago: executing program 2 (id=891): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000002200)="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"/3584, 0xe00) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x1000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x10000810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000005300000008000300", @ANYRES32=r6], 0x30}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002"]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000030101040000000000000000020000002c000280140001800800010000080001080002001b1414aa0c00028005000100000000000600034000000000"], 0x40}}, 0x0) unlink(&(0x7f0000000000)='./file1\x00') io_setup(0x3, &(0x7f00000003c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r11, 0x567, 0x0, 0x0, 0x0, 0x0) 2.219850613s ago: executing program 3 (id=892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x61) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)=' ', 0x1, 0x4044841, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@empty}, {}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902"], 0x0) socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 0s ago: executing program 0 (id=893): openat$capi20(0xffffffffffffff9c, 0x0, 0x501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000280)={0x18, r4, 0x2, 0x0, &(0x7f0000000200)=[{0x0, 0x5}, {0x6, 0x7}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 7] hsr_slave_0: entered promiscuous mode [ 108.898983][ T5097] hsr_slave_1: entered promiscuous mode [ 108.909471][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.917711][ T5097] Cannot create hsr debugfs directory [ 109.500255][ T5082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.541700][ T5082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.614513][ T5082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.663800][ T5082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.719970][ T5087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.743358][ T5087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.792324][ T5087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.841591][ T5087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.934904][ T5081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.956171][ T5081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.971416][ T5081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.006366][ T5081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.233106][ T5080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.250322][ T5080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.268463][ T5080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.320510][ T5080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.470756][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.505556][ T5085] Bluetooth: hci0: command tx timeout [ 110.511775][ T5085] Bluetooth: hci1: command tx timeout [ 110.572327][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.580128][ T5085] Bluetooth: hci2: command tx timeout [ 110.580137][ T4477] Bluetooth: hci3: command tx timeout [ 110.600106][ T5097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.648420][ T5097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.663760][ T5097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.697993][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.718873][ T5097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.796570][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.815620][ T5085] Bluetooth: hci4: command tx timeout [ 110.841796][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.850739][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.909902][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.917254][ T5067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.939244][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.947147][ T5067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.031186][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.039179][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.119558][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.282952][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.363336][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.393906][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.401226][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.452661][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.579566][ T29] audit: type=1400 audit(1720225399.955:113): avc: denied { sys_module } for pid=5082 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.603190][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.622079][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.629410][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.751158][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.854088][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.861613][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.922669][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.971655][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.979024][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.019681][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.026950][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.099016][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.106449][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.174373][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.214088][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.585176][ T5085] Bluetooth: hci1: command tx timeout [ 112.587592][ T4477] Bluetooth: hci0: command tx timeout [ 112.662353][ T4477] Bluetooth: hci3: command tx timeout [ 112.667799][ T5085] Bluetooth: hci2: command tx timeout [ 112.692135][ T5087] veth0_vlan: entered promiscuous mode [ 112.811193][ T5082] veth0_vlan: entered promiscuous mode [ 112.830499][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.846168][ T5087] veth1_vlan: entered promiscuous mode [ 112.906166][ T4477] Bluetooth: hci4: command tx timeout [ 112.941793][ T5082] veth1_vlan: entered promiscuous mode [ 113.132638][ T5081] veth0_vlan: entered promiscuous mode [ 113.152536][ T5082] veth0_macvtap: entered promiscuous mode [ 113.189360][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.206742][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.236248][ T5081] veth1_vlan: entered promiscuous mode [ 113.262523][ T5087] veth0_macvtap: entered promiscuous mode [ 113.279440][ T5082] veth1_macvtap: entered promiscuous mode [ 113.318590][ T5087] veth1_macvtap: entered promiscuous mode [ 113.432335][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.503172][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.529801][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.549525][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.569301][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.601733][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.629411][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.651597][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.690097][ T5097] veth0_vlan: entered promiscuous mode [ 113.713792][ T5081] veth0_macvtap: entered promiscuous mode [ 113.737261][ T5082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.748390][ T5082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.757630][ T5082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.766654][ T5082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.798248][ T5087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.807221][ T5087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.819831][ T5087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.828700][ T5087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.857261][ T5081] veth1_macvtap: entered promiscuous mode [ 113.973609][ T5097] veth1_vlan: entered promiscuous mode [ 114.053903][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.069443][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.079709][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.090344][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.108341][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.124115][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.135250][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.145794][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.156614][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.171524][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.233578][ T5081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.247737][ T5081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.259260][ T5081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.268210][ T5081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.289230][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.308329][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.502253][ T5080] veth0_vlan: entered promiscuous mode [ 114.527854][ T5097] veth0_macvtap: entered promiscuous mode [ 114.549065][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.576713][ T5097] veth1_macvtap: entered promiscuous mode [ 114.577561][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.610392][ T5080] veth1_vlan: entered promiscuous mode [ 114.624789][ T29] audit: type=1400 audit(1720225403.005:114): avc: denied { mounton } for pid=5087 comm="syz-executor" path="/root/syzkaller.ijgrP0/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 114.659149][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.683250][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.696730][ T29] audit: type=1400 audit(1720225403.005:115): avc: denied { mount } for pid=5087 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.761449][ T29] audit: type=1400 audit(1720225403.005:116): avc: denied { mounton } for pid=5087 comm="syz-executor" path="/root/syzkaller.ijgrP0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.789044][ T29] audit: type=1400 audit(1720225403.005:117): avc: denied { mount } for pid=5087 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 114.837490][ T29] audit: type=1400 audit(1720225403.005:118): avc: denied { unmount } for pid=5087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.882744][ T29] audit: type=1400 audit(1720225403.045:119): avc: denied { mounton } for pid=5087 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 114.910453][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.924988][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.956403][ T29] audit: type=1400 audit(1720225403.055:120): avc: denied { mount } for pid=5087 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.028606][ T29] audit: type=1400 audit(1720225403.305:121): avc: denied { read write } for pid=5087 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.049267][ T5080] veth0_macvtap: entered promiscuous mode [ 115.096773][ T29] audit: type=1400 audit(1720225403.305:122): avc: denied { open } for pid=5087 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.181955][ T5080] veth1_macvtap: entered promiscuous mode [ 115.221525][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.233146][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.245319][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.247774][ T5166] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.261728][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.288452][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.309834][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.342943][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.432001][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.447105][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.504568][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.530183][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.541461][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.559225][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.569789][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.582120][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.594396][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.612998][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.654819][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.663118][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.680721][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.691690][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.702988][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.722986][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.733880][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.749995][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.759099][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.786113][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.791114][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.825926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.845826][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.868943][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.880339][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.926866][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.939907][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.950413][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.967143][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.011108][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.097408][ T5097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.120761][ T5097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.134446][ T5097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.155172][ T5097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.191351][ T5080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.223267][ T5080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.248960][ T5080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.278796][ T5080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.751898][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 116.751923][ T29] audit: type=1400 audit(1720225405.135:144): avc: denied { read } for pid=5176 comm="syz.3.4" dev="nsfs" ino=4026532986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 116.874841][ T29] audit: type=1400 audit(1720225405.165:145): avc: denied { open } for pid=5176 comm="syz.3.4" path="net:[4026532986]" dev="nsfs" ino=4026532986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 117.272070][ T29] audit: type=1400 audit(1720225405.215:146): avc: denied { perfmon } for pid=5171 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.445259][ T29] audit: type=1400 audit(1720225405.225:147): avc: denied { create } for pid=5171 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.632225][ T29] audit: type=1400 audit(1720225405.225:148): avc: denied { write } for pid=5171 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.657011][ T29] audit: type=1400 audit(1720225405.345:149): avc: denied { connect } for pid=5176 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.723596][ T29] audit: type=1400 audit(1720225405.365:150): avc: denied { getopt } for pid=5176 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.800198][ T29] audit: type=1400 audit(1720225406.045:151): avc: denied { map_create } for pid=5181 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.890460][ T29] audit: type=1400 audit(1720225406.045:152): avc: denied { map_read map_write } for pid=5181 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.994992][ T29] audit: type=1400 audit(1720225406.255:153): avc: denied { write } for pid=5185 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.032101][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.082647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.228119][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.244165][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.418166][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.429590][ T5194] tmpfs: Bad value for 'uid' [ 118.449332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.507563][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.556034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.706213][ T5196] IPVS: persistence engine module ip_vs_pe_ not found [ 118.994002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.268290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.268519][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 119.915580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.120180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.176902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.224498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.144231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.265765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.267580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 122.293387][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 122.293405][ T29] audit: type=1400 audit(1720225410.675:176): avc: denied { create } for pid=5225 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.559704][ T5226] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.837857][ T5234] ======================================================= [ 122.837857][ T5234] WARNING: The mand mount option has been deprecated and [ 122.837857][ T5234] and is ignored by this kernel. Remove the mand [ 122.837857][ T5234] option from the mount to silence this warning. [ 122.837857][ T5234] ======================================================= [ 122.956873][ T5132] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.979495][ T29] audit: type=1400 audit(1720225411.355:177): avc: denied { bind } for pid=5236 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.053800][ T29] audit: type=1400 audit(1720225411.365:178): avc: denied { name_bind } for pid=5236 comm="syz.0.24" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.142118][ T29] audit: type=1400 audit(1720225411.365:179): avc: denied { node_bind } for pid=5236 comm="syz.0.24" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 123.243925][ T5132] usb 3-1: Using ep0 maxpacket: 8 [ 123.261441][ T5239] IPVS: persistence engine module ip_vs_pe_ not found [ 123.268745][ T5132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.268929][ T5132] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.268974][ T5132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.269013][ T5132] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 123.277522][ T29] audit: type=1400 audit(1720225411.365:180): avc: denied { write } for pid=5236 comm="syz.0.24" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.360596][ T5132] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.393842][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.419030][ T5132] usb 3-1: Product: syz [ 123.423276][ T5132] usb 3-1: Manufacturer: syz [ 123.437041][ T5132] usb 3-1: SerialNumber: syz [ 123.533259][ T5132] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 123.552569][ T29] audit: type=1400 audit(1720225411.365:181): avc: denied { name_connect } for pid=5236 comm="syz.0.24" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.760271][ T29] audit: type=1400 audit(1720225411.535:182): avc: denied { unmount } for pid=5081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.860051][ T29] audit: type=1400 audit(1720225411.985:183): avc: denied { read } for pid=5242 comm="syz.0.26" name="video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.940648][ T29] audit: type=1400 audit(1720225411.985:184): avc: denied { open } for pid=5242 comm="syz.0.26" path="/dev/video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.978505][ T5246] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.126327][ T29] audit: type=1400 audit(1720225412.295:185): avc: denied { ioctl } for pid=5245 comm="syz.4.27" path="socket:[7405]" dev="sockfs" ino=7405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.879689][ T5250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.191247][ T3383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.215988][ T5233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.225907][ T5233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.470087][ T3383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.673725][ T5067] usb 3-1: USB disconnect, device number 2 [ 125.732272][ T3383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.766334][ T5261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 125.773339][ T5261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.821547][ T5261] vhci_hcd vhci_hcd.0: Device attached [ 126.020975][ T3383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.145216][ T5145] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 126.561935][ T5262] vhci_hcd: connection reset by peer [ 126.627583][ T4189] vhci_hcd: stop threads [ 126.657911][ T4189] vhci_hcd: release socket [ 126.679056][ T4189] vhci_hcd: disconnect device [ 126.692162][ T3383] bridge_slave_1: left allmulticast mode [ 126.708990][ T3383] bridge_slave_1: left promiscuous mode [ 126.730908][ T3383] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.897634][ T3383] bridge_slave_0: left allmulticast mode [ 126.914237][ T3383] bridge_slave_0: left promiscuous mode [ 126.914473][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.929676][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.945962][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.964685][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.964881][ T3383] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.989938][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.999676][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.080359][ T5277] IPVS: persistence engine module ip_vs_pe_ not found [ 128.162768][ T3383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.183387][ T3383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.197234][ T3383] bond0 (unregistering): Released all slaves [ 128.923823][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 128.923847][ T29] audit: type=1400 audit(1720225417.305:195): avc: denied { create } for pid=5306 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.155366][ T5085] Bluetooth: hci0: command tx timeout [ 129.695444][ T29] audit: type=1400 audit(1720225417.745:196): avc: denied { relabelfrom } for pid=5308 comm="syz.0.49" name="" dev="pipefs" ino=7691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 130.352158][ T5311] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 130.358750][ T5311] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.389989][ T5311] vhci_hcd vhci_hcd.0: Device attached [ 130.390191][ T29] audit: type=1400 audit(1720225417.755:197): avc: denied { accept } for pid=5308 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.675444][ T25] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 130.695430][ T29] audit: type=1400 audit(1720225419.075:198): avc: denied { setopt } for pid=5317 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.844936][ T29] audit: type=1400 audit(1720225419.225:199): avc: denied { create } for pid=5317 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.905018][ T29] audit: type=1400 audit(1720225419.285:200): avc: denied { read write } for pid=5325 comm="syz.1.53" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.985171][ T5314] vhci_hcd: connection reset by peer [ 131.024350][ T62] vhci_hcd: stop threads [ 131.052030][ T62] vhci_hcd: release socket [ 131.068601][ T62] vhci_hcd: disconnect device [ 131.078079][ T29] audit: type=1400 audit(1720225419.355:201): avc: denied { open } for pid=5325 comm="syz.1.53" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 131.078177][ T29] audit: type=1400 audit(1720225419.435:202): avc: denied { create } for pid=5325 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.215236][ T5085] Bluetooth: hci0: command tx timeout [ 131.296949][ T5145] vhci_hcd: vhci_device speed not set [ 131.305354][ T29] audit: type=1400 audit(1720225419.685:203): avc: denied { connect } for pid=5317 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.627927][ T3383] hsr_slave_0: left promiscuous mode [ 131.717941][ T3383] hsr_slave_1: left promiscuous mode [ 131.747514][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.779934][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.809866][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.831383][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.931546][ T3383] veth1_macvtap: left promiscuous mode [ 131.963098][ T3383] veth0_macvtap: left promiscuous mode [ 131.975364][ T3383] veth1_vlan: left promiscuous mode [ 131.981736][ T3383] veth0_vlan: left promiscuous mode [ 132.354191][ T29] audit: type=1400 audit(1720225420.735:204): avc: denied { create } for pid=5345 comm="syz.4.59" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.829164][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 133.295246][ T5085] Bluetooth: hci0: command tx timeout [ 134.330384][ T3383] team0 (unregistering): Port device team_slave_1 removed [ 134.465926][ T3383] team0 (unregistering): Port device team_slave_0 removed [ 135.380443][ T5085] Bluetooth: hci0: command tx timeout [ 135.553418][ T5278] chnl_net:caif_netlink_parms(): no params data found [ 135.650074][ T5351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.61'. [ 135.665179][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 135.905510][ T25] vhci_hcd: vhci_device speed not set [ 136.321027][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.344802][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.631935][ T5278] bridge_slave_0: entered allmulticast mode [ 136.649032][ T29] audit: type=1400 audit(1720225424.775:205): avc: denied { connect } for pid=5358 comm="syz.4.65" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.980412][ T5278] bridge_slave_0: entered promiscuous mode [ 137.088563][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.136552][ T29] audit: type=1400 audit(1720225424.835:206): avc: denied { ioctl } for pid=5358 comm="syz.4.65" path="socket:[7816]" dev="sockfs" ino=7816 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.160581][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.201617][ T5278] bridge_slave_1: entered allmulticast mode [ 137.237829][ T5278] bridge_slave_1: entered promiscuous mode [ 137.727967][ T5278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.829321][ T5278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.031324][ T29] audit: type=1400 audit(1720225426.415:207): avc: denied { unmount } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.364183][ T29] audit: type=1400 audit(1720225426.515:208): avc: denied { create } for pid=5375 comm="syz.4.70" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.566320][ T5384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'. [ 138.596431][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.605796][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.616875][ T29] audit: type=1400 audit(1720225426.545:209): avc: denied { map } for pid=5375 comm="syz.4.70" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.671994][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 138.792022][ T29] audit: type=1400 audit(1720225426.545:210): avc: denied { execute } for pid=5375 comm="syz.4.70" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.848259][ T29] audit: type=1400 audit(1720225427.225:211): avc: denied { unlink } for pid=5080 comm="syz-executor" name="bus" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.958410][ T5278] team0: Port device team_slave_0 added [ 139.052476][ T5278] team0: Port device team_slave_1 added [ 139.237746][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.252698][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.317212][ T5278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.374505][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.395118][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.435503][ T5145] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.445311][ T29] audit: type=1400 audit(1720225427.815:212): avc: denied { create } for pid=5396 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.509438][ T5278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.520529][ T29] audit: type=1400 audit(1720225427.895:213): avc: denied { bind } for pid=5396 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.105341][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 140.656802][ T5278] hsr_slave_0: entered promiscuous mode [ 140.706358][ T5278] hsr_slave_1: entered promiscuous mode [ 140.739413][ T5278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.780867][ T5278] Cannot create hsr debugfs directory [ 141.122025][ T4477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.132678][ T4477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.149719][ T5145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.150229][ T4477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.169557][ T5145] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 141.176345][ T4477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.192337][ T4477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.200717][ T4477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.230847][ T5145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.294752][ T5145] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 141.314573][ T5412] capability: warning: `syz.1.84' uses deprecated v2 capabilities in a way that may be insecure [ 141.330803][ T5412] program syz.1.84 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.395597][ T5145] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.404739][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.456769][ T5145] usb 5-1: Product: syz [ 141.461009][ T5145] usb 5-1: Manufacturer: syz [ 141.494395][ T5145] usb 5-1: SerialNumber: syz [ 141.750938][ T5145] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.785309][ T5150] usb 5-1: USB disconnect, device number 2 [ 142.824240][ T29] audit: type=1400 audit(1720225431.205:214): avc: denied { read write } for pid=5417 comm="syz.1.87" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 142.913246][ T29] audit: type=1400 audit(1720225431.235:215): avc: denied { open } for pid=5417 comm="syz.1.87" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 142.997600][ T29] audit: type=1400 audit(1720225431.325:216): avc: denied { write } for pid=5420 comm="syz.4.88" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.219078][ T4477] Bluetooth: hci5: command tx timeout [ 143.301244][ T29] audit: type=1400 audit(1720225431.685:217): avc: denied { read } for pid=5425 comm="syz.4.91" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.395666][ T29] audit: type=1400 audit(1720225431.685:218): avc: denied { bind } for pid=5425 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.465051][ T29] audit: type=1400 audit(1720225431.845:219): avc: denied { setopt } for pid=5425 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.525928][ T29] audit: type=1400 audit(1720225431.895:220): avc: denied { block_suspend } for pid=5425 comm="syz.4.91" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.633943][ T4477] Bluetooth: hci1: Malformed Event: 0x2f [ 143.723867][ T29] audit: type=1400 audit(1720225432.105:221): avc: denied { create } for pid=5433 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 143.738718][ T5435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5435 comm=syz.1.92 [ 143.776273][ T29] audit: type=1400 audit(1720225432.105:222): avc: denied { write } for pid=5433 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 143.799451][ T29] audit: type=1400 audit(1720225432.155:223): avc: denied { read } for pid=5433 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.157660][ T4477] Bluetooth: hci5: command tx timeout [ 146.766075][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 146.967351][ T4189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.830721][ T4189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.878797][ T29] audit: type=1400 audit(1720225436.255:224): avc: denied { watch } for pid=5459 comm="syz.4.100" path="/26/control" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.997909][ T5463] QAT: Invalid ioctl 1076389384 [ 148.030382][ T5463] QAT: Invalid ioctl -805268418 [ 148.059939][ T5465] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5465 comm=syz.0.102 [ 148.061739][ T5463] QAT: Invalid ioctl -805268418 [ 148.127316][ T5463] QAT: Invalid ioctl -805268463 [ 148.135918][ T5463] QAT: Invalid ioctl -2114415556 [ 148.142055][ T5463] QAT: Invalid ioctl 21531 [ 148.179613][ T4477] Bluetooth: hci5: command tx timeout [ 148.203208][ T4189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.606978][ T5473] netlink: 92 bytes leftover after parsing attributes in process `syz.1.105'. [ 149.981059][ T29] audit: type=1400 audit(1720225438.365:225): avc: denied { mounton } for pid=5481 comm="syz.4.106" path="/28/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.004071][ T5482] devtmpfs: Cannot enable quota on remount [ 150.142404][ T29] audit: type=1400 audit(1720225438.525:226): avc: denied { read write } for pid=5483 comm="syz.1.108" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.166600][ T29] audit: type=1400 audit(1720225438.525:227): avc: denied { open } for pid=5483 comm="syz.1.108" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.198036][ T29] audit: type=1400 audit(1720225438.525:228): avc: denied { ioctl } for pid=5483 comm="syz.1.108" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.230514][ T4189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.255340][ T4477] Bluetooth: hci5: command tx timeout [ 150.264005][ T5278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.391464][ T5278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.438827][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.458544][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.467478][ T5407] bridge_slave_0: entered allmulticast mode [ 150.491467][ T5407] bridge_slave_0: entered promiscuous mode [ 150.511123][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.523863][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.544507][ T5407] bridge_slave_1: entered allmulticast mode [ 150.561753][ T5407] bridge_slave_1: entered promiscuous mode [ 150.632236][ T5278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.767597][ T4477] Bluetooth: hci1: Malformed Event: 0x2f [ 150.778148][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.796762][ T5278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.891002][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.935044][ T29] audit: type=1400 audit(1720225439.315:229): avc: denied { listen } for pid=5497 comm="syz.1.112" lport=35154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.005591][ T29] audit: type=1400 audit(1720225439.385:230): avc: denied { ioctl } for pid=5497 comm="syz.1.112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8686 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.008939][ T5500] QAT: Invalid ioctl 1076389384 [ 151.124342][ T5407] team0: Port device team_slave_0 added [ 151.125270][ T29] audit: type=1400 audit(1720225439.505:231): avc: denied { create } for pid=5497 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 151.131611][ T5500] QAT: Invalid ioctl -805268418 [ 151.228120][ T5407] team0: Port device team_slave_1 added [ 151.244210][ T5500] QAT: Invalid ioctl -805268418 [ 151.287930][ T5500] QAT: Invalid ioctl -805268463 [ 151.482336][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.501360][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.533934][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.561800][ T4189] bridge_slave_1: left allmulticast mode [ 151.565131][ T5512] devtmpfs: Cannot enable quota on remount [ 151.575157][ T4189] bridge_slave_1: left promiscuous mode [ 151.586495][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.718717][ T29] audit: type=1400 audit(1720225440.075:232): avc: denied { setopt } for pid=5509 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.855392][ T4189] bridge_slave_0: left allmulticast mode [ 151.980210][ T4189] bridge_slave_0: left promiscuous mode [ 152.047342][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.160571][ T5516] netlink: 92 bytes leftover after parsing attributes in process `syz.4.117'. [ 153.041741][ T4189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.055045][ T4189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.069043][ T4189] bond0 (unregistering): Released all slaves [ 153.099965][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.107563][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.134380][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.694490][ T5407] hsr_slave_0: entered promiscuous mode [ 153.752016][ T5407] hsr_slave_1: entered promiscuous mode [ 153.781326][ T5407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.787883][ T5532] adf_ctl_ioctl: 2 callbacks suppressed [ 153.787907][ T5532] QAT: Invalid ioctl 1076389384 [ 153.793262][ T5407] Cannot create hsr debugfs directory [ 154.157820][ T5532] QAT: Invalid ioctl -805268418 [ 154.482748][ T5537] QAT: Invalid ioctl -805268418 [ 154.532862][ T5532] QAT: Invalid ioctl -805268463 [ 154.570775][ T5532] QAT: Invalid ioctl -2114415556 [ 154.591647][ T5532] QAT: Invalid ioctl 21531 [ 154.880236][ T29] audit: type=1400 audit(1720225443.265:233): avc: denied { map } for pid=5539 comm="syz.4.126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.971627][ T29] audit: type=1400 audit(1720225443.305:234): avc: denied { read write } for pid=5539 comm="syz.4.126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.035242][ T29] audit: type=1400 audit(1720225443.395:235): avc: denied { execute } for pid=5539 comm="syz.4.126" path="/35/cpu.stat" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.111094][ T29] audit: type=1400 audit(1720225443.425:236): avc: denied { bind } for pid=5542 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.192417][ T29] audit: type=1400 audit(1720225443.455:237): avc: denied { cmd } for pid=5539 comm="syz.4.126" path="socket:[8822]" dev="sockfs" ino=8822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.230359][ T5543] overlayfs: missing 'lowerdir' [ 155.269799][ T29] audit: type=1400 audit(1720225443.485:238): avc: denied { setopt } for pid=5542 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.282532][ T5543] overlayfs: missing 'lowerdir' [ 155.364711][ T29] audit: type=1400 audit(1720225443.535:239): avc: denied { write } for pid=5542 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.415214][ T29] audit: type=1400 audit(1720225443.575:240): avc: denied { mount } for pid=5542 comm="syz.0.127" name="/" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 155.476366][ T29] audit: type=1400 audit(1720225443.605:241): avc: denied { mounton } for pid=5542 comm="syz.0.127" path="/37/file0" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.529255][ T4189] hsr_slave_0: left promiscuous mode [ 155.551943][ T29] audit: type=1400 audit(1720225443.745:242): avc: denied { write } for pid=5542 comm="syz.0.127" name="/" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.579395][ T4189] hsr_slave_1: left promiscuous mode [ 155.654879][ T4189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.676580][ T4189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.717759][ T4189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.738522][ T4189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.758901][ T5553] netlink: 92 bytes leftover after parsing attributes in process `syz.4.132'. [ 155.821300][ T4189] veth1_macvtap: left promiscuous mode [ 155.832679][ T4189] veth0_macvtap: left promiscuous mode [ 155.842957][ T4189] veth1_vlan: left promiscuous mode [ 155.863954][ T4189] veth0_vlan: left promiscuous mode [ 157.740360][ T5569] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 158.115444][ T5574] overlayfs: missing 'lowerdir' [ 158.146075][ T5574] overlayfs: missing 'lowerdir' [ 158.839735][ T4189] team0 (unregistering): Port device team_slave_1 removed [ 158.899585][ T4189] team0 (unregistering): Port device team_slave_0 removed [ 160.367400][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 160.792326][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 160.792349][ T29] audit: type=1400 audit(1720225449.175:245): avc: denied { create } for pid=5588 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.833772][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.867452][ T29] audit: type=1400 audit(1720225449.185:246): avc: denied { bind } for pid=5588 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.894048][ T29] audit: type=1400 audit(1720225449.235:247): avc: denied { connect } for pid=5588 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.987589][ T5591] binder: 5590:5591 ioctl c018620c 20000140 returned -22 [ 161.025409][ T29] audit: type=1400 audit(1720225449.355:248): avc: denied { listen } for pid=5588 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.099812][ T5278] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.165938][ T5593] netlink: 5072 bytes leftover after parsing attributes in process `syz.1.148'. [ 161.221057][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.228394][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.235690][ T5593] netlink: zone id is out of range [ 161.256185][ T5593] netlink: get zone limit has 8 unknown bytes [ 161.283480][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.290822][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.326284][ T5596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 161.343895][ T5596] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 162.349297][ T5603] netlink: 'syz.1.151': attribute type 23 has an invalid length. [ 162.402375][ T5278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.476148][ T5605] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 162.495793][ T5278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.759713][ T29] audit: type=1400 audit(1720225451.145:249): avc: denied { ioctl } for pid=5606 comm="syz.0.153" path="socket:[9050]" dev="sockfs" ino=9050 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.885489][ T29] audit: type=1400 audit(1720225451.275:250): avc: denied { bind } for pid=5610 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.989109][ T29] audit: type=1400 audit(1720225451.315:251): avc: denied { write } for pid=5610 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.037506][ T5407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.069094][ T29] audit: type=1400 audit(1720225451.365:252): avc: denied { create } for pid=5614 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.117187][ T5407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.150515][ T29] audit: type=1400 audit(1720225451.405:253): avc: denied { bind } for pid=5614 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.176886][ T5407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.222933][ T5407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.245217][ T29] audit: type=1400 audit(1720225451.405:254): avc: denied { name_bind } for pid=5614 comm="syz.1.155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 163.596933][ T5628] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 164.030263][ T5278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.290058][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.652975][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.693765][ T5638] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 164.878714][ T5278] veth0_vlan: entered promiscuous mode [ 164.998174][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.005479][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.062559][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.069827][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.159946][ T5278] veth1_vlan: entered promiscuous mode [ 165.507465][ T5278] veth0_macvtap: entered promiscuous mode [ 165.544395][ T5655] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 165.600357][ T5278] veth1_macvtap: entered promiscuous mode [ 165.874297][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.910663][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.975192][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.017147][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.035611][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.046857][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.107939][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.158579][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.202422][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.242289][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.295226][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.326524][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.366972][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.420576][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.479511][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 166.479533][ T29] audit: type=1400 audit(1720225454.865:275): avc: denied { write } for pid=5670 comm="syz.0.172" name="vbi1" dev="devtmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.544202][ T5278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.595148][ T5278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.603751][ T29] audit: type=1400 audit(1720225454.915:276): avc: denied { ioctl } for pid=5670 comm="syz.0.172" path="/dev/vbi1" dev="devtmpfs" ino=871 ioctlcmd=0x5649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.624574][ T5278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.652987][ T5278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.704484][ T29] audit: type=1400 audit(1720225455.065:277): avc: denied { mount } for pid=5667 comm="syz.4.171" name="/" dev="overlay" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.876304][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.203723][ T5685] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 167.334062][ T5407] veth0_vlan: entered promiscuous mode [ 167.360310][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.388500][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.404019][ T5407] veth1_vlan: entered promiscuous mode [ 168.203564][ T5698] Illegal XDP return value 4294967274 on prog (id 26) dev N/A, expect packet loss! [ 168.652605][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.687735][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.901422][ T29] audit: type=1400 audit(1720225457.285:278): avc: denied { mount } for pid=5278 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.988047][ T29] audit: type=1400 audit(1720225457.365:279): avc: denied { write } for pid=5690 comm="syz.1.180" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.051337][ T5407] veth0_macvtap: entered promiscuous mode [ 169.101047][ T5407] veth1_macvtap: entered promiscuous mode [ 169.201077][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.214057][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.226510][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.238113][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.256371][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.285349][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.308370][ T29] audit: type=1400 audit(1720225457.685:280): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 169.330164][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.341367][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.377911][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.442441][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.474509][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.500590][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.517071][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.533191][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.554181][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.570081][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.593864][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.609855][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.645271][ T29] audit: type=1400 audit(1720225458.025:281): avc: denied { read } for pid=5708 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.894550][ T5407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.919359][ T29] audit: type=1400 audit(1720225458.105:282): avc: denied { setopt } for pid=5708 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.956616][ T29] audit: type=1400 audit(1720225458.115:283): avc: denied { write } for pid=5708 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.000745][ T5407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.014756][ T5407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.032085][ T5407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.380373][ T29] audit: type=1400 audit(1720225459.765:284): avc: denied { read } for pid=5726 comm="syz.0.188" laddr=::1 lport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.792324][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.792355][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.982623][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.982653][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.020009][ T5737] input: syz0 as /devices/virtual/input/input5 [ 172.023870][ T29] audit: type=1400 audit(1720225460.395:285): avc: denied { ioctl } for pid=5736 comm="syz.1.193" path="/dev/uinput" dev="devtmpfs" ino=836 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.031252][ T29] audit: type=1400 audit(1720225460.415:286): avc: denied { read } for pid=4518 comm="acpid" name="event4" dev="devtmpfs" ino=2328 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.031347][ T29] audit: type=1400 audit(1720225460.415:287): avc: denied { open } for pid=4518 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2328 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.031433][ T29] audit: type=1400 audit(1720225460.415:288): avc: denied { ioctl } for pid=4518 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2328 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.165293][ T5150] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 172.227711][ T5093] udevd[5093]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 172.422723][ T5150] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 172.422776][ T5150] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 172.422811][ T5150] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 172.422886][ T5150] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 172.422967][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 172.423007][ T5150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 172.427559][ T5150] usb 4-1: string descriptor 0 read error: -22 [ 172.427814][ T5150] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 172.427857][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.480561][ T5150] usb 4-1: config 0 descriptor?? [ 172.482564][ T5734] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.494260][ T5150] hub 4-1:0.0: bad descriptor, ignoring hub [ 172.494336][ T5150] hub 4-1:0.0: probe with driver hub failed with error -5 [ 172.523726][ T5150] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 172.603390][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 172.929118][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 172.930060][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 174.328241][ T29] audit: type=1400 audit(1720225462.715:289): avc: denied { read } for pid=5733 comm="syz.3.191" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 174.328838][ T29] audit: type=1400 audit(1720225462.715:290): avc: denied { open } for pid=5733 comm="syz.3.191" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 174.566020][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 174.606379][ T25] usb 4-1: USB disconnect, device number 2 [ 174.846397][ T29] audit: type=1400 audit(1720225463.225:291): avc: denied { mounton } for pid=5758 comm="syz.4.198" path="/proc/144/task" dev="proc" ino=11318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 175.015398][ T29] audit: type=1326 audit(1720225463.345:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2146d75bd9 code=0x0 [ 175.133225][ T29] audit: type=1326 audit(1720225463.515:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.0.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x0 [ 175.917547][ T29] audit: type=1400 audit(1720225464.235:294): avc: denied { create } for pid=5771 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.023371][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 176.941422][ T5783] input: syz0 as /devices/virtual/input/input7 [ 177.079189][ T29] audit: type=1400 audit(1720225465.455:295): avc: denied { setopt } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.146558][ T29] audit: type=1400 audit(1720225465.535:296): avc: denied { create } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.282319][ T29] audit: type=1400 audit(1720225465.665:297): avc: denied { getopt } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.383118][ T29] audit: type=1400 audit(1720225465.705:298): avc: denied { ioctl } for pid=5779 comm="syz.3.206" path="socket:[10814]" dev="sockfs" ino=10814 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.407717][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.477521][ T29] audit: type=1400 audit(1720225465.765:299): avc: denied { getopt } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.564738][ T29] audit: type=1400 audit(1720225465.805:300): avc: denied { getopt } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.901948][ T29] audit: type=1400 audit(1720225465.925:301): avc: denied { create } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.937239][ T29] audit: type=1400 audit(1720225465.945:302): avc: denied { bind } for pid=5779 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.087592][ T29] audit: type=1400 audit(1720225465.945:303): avc: denied { setattr } for pid=5779 comm="syz.3.206" name="AF_VSOCK" dev="sockfs" ino=10826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.780994][ T29] audit: type=1326 audit(1720225468.155:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d1175bd9 code=0x0 [ 180.324463][ T45] IPVS: starting estimator thread 0... [ 180.345619][ T5145] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 181.237561][ T5828] IPVS: using max 19 ests per chain, 45600 per kthread [ 181.329371][ T5145] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 181.357952][ T5145] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 181.420453][ T5145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 181.471277][ T5145] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 181.525259][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 181.539383][ T5145] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 181.578115][ T5145] usb 1-1: string descriptor 0 read error: -22 [ 181.588070][ T5145] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 181.607247][ T5145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.653451][ T5145] usb 1-1: config 0 descriptor?? [ 181.695927][ T5817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.723642][ T5145] hub 1-1:0.0: bad descriptor, ignoring hub [ 181.744858][ T5145] hub 1-1:0.0: probe with driver hub failed with error -5 [ 181.774428][ T5145] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 181.979097][ T5836] input: syz0 as /devices/virtual/input/input9 [ 182.045869][ T5838] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [S] [ 182.254991][ T5843] netlink: 'syz.4.225': attribute type 12 has an invalid length. [ 182.274141][ T5145] usb 1-1: USB disconnect, device number 2 [ 182.308680][ T5843] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.225'. [ 182.903630][ T5854] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [FSR.] L3 index 0 [ 184.893464][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 184.893488][ T29] audit: type=1326 audit(1720225473.275:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdcb175bd9 code=0x0 [ 184.922419][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.226550][ T5887] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [S] [ 186.640888][ T5892] netlink: 'syz.0.240': attribute type 12 has an invalid length. [ 186.665889][ T5892] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.240'. [ 186.765200][ T29] audit: type=1400 audit(1720225475.145:309): avc: denied { name_bind } for pid=5894 comm="syz.4.241" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 186.875660][ T29] audit: type=1400 audit(1720225475.215:310): avc: denied { read } for pid=5894 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.490932][ T52] IPVS: starting estimator thread 0... [ 187.606136][ T5910] IPVS: using max 21 ests per chain, 50400 per kthread [ 192.015567][ T45] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 192.459261][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.665337][ T5132] IPVS: starting estimator thread 0... [ 192.759102][ T5929] mmap: syz.4.251 (5929) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.816293][ T5930] IPVS: using max 15 ests per chain, 36000 per kthread [ 193.811991][ T29] audit: type=1400 audit(1720225482.175:311): avc: denied { connect } for pid=5942 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.926680][ T5950] autofs: Bad value for 'fd' [ 198.351510][ T5132] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 198.723366][ T5132] usb 4-1: device descriptor read/all, error -71 [ 198.938278][ T29] audit: type=1400 audit(1720225487.325:312): avc: denied { read write } for pid=5973 comm="syz.0.267" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.065647][ T29] audit: type=1400 audit(1720225487.345:313): avc: denied { open } for pid=5973 comm="syz.0.267" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.184153][ T29] audit: type=1400 audit(1720225487.395:314): avc: denied { open } for pid=5974 comm="syz.3.268" path="/dev/ptyqb" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.574301][ T29] audit: type=1400 audit(1720225487.515:315): avc: denied { ioctl } for pid=5974 comm="syz.3.268" path="/dev/ptyqb" dev="devtmpfs" ino=132 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 200.206677][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.214721][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.301284][ T29] audit: type=1400 audit(1720225487.565:316): avc: denied { read write } for pid=5960 comm="syz.1.265" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.168337][ T29] audit: type=1400 audit(1720225487.575:317): avc: denied { open } for pid=5960 comm="syz.1.265" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.309444][ T4477] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 201.799558][ T5992] autofs: Bad value for 'fd' [ 203.425134][ T29] audit: type=1400 audit(1720225490.915:318): avc: denied { read } for pid=6001 comm="syz.2.278" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.912447][ T29] audit: type=1400 audit(1720225490.915:319): avc: denied { open } for pid=6001 comm="syz.2.278" path="/dev/iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.194035][ T29] audit: type=1400 audit(1720225492.225:320): avc: denied { ioctl } for pid=6001 comm="syz.2.278" path="/dev/iommu" dev="devtmpfs" ino=626 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.720271][ T29] audit: type=1400 audit(1720225494.105:321): avc: denied { append } for pid=6017 comm="syz.2.280" name="cec2" dev="devtmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.954498][ T6024] libceph: resolve '40' (ret=-3): failed [ 207.019040][ T29] audit: type=1400 audit(1720225495.385:322): avc: denied { write } for pid=6030 comm="syz.3.286" name="rdma_cm" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.375458][ T5085] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 209.375710][ T4477] Bluetooth: hci3: command 0x1003 tx timeout [ 210.158927][ T6060] libceph: resolve '40' (ret=-3): failed [ 213.538985][ T29] audit: type=1400 audit(1720225501.925:323): avc: denied { create } for pid=6085 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.605204][ T6087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 213.611806][ T6087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.726192][ T6087] vhci_hcd vhci_hcd.0: Device attached [ 213.759189][ T29] audit: type=1400 audit(1720225502.145:324): avc: denied { read } for pid=6085 comm="syz.1.305" path="socket:[12364]" dev="sockfs" ino=12364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.921324][ T6093] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 213.951332][ T82] vhci_hcd: stop threads [ 213.957227][ T82] vhci_hcd: release socket [ 213.984603][ T82] vhci_hcd: disconnect device [ 214.027451][ T6097] libceph: resolve '40' (ret=-3): failed [ 214.034301][ T29] audit: type=1400 audit(1720225502.415:325): avc: denied { write } for pid=6098 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.096462][ T29] audit: type=1400 audit(1720225503.475:326): avc: denied { setopt } for pid=6107 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.325181][ T6143] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 221.331775][ T6143] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.427425][ T6143] vhci_hcd vhci_hcd.0: Device attached [ 221.475405][ T6154] vhci_hcd: connection closed [ 221.508100][ T1093] vhci_hcd: stop threads [ 221.547656][ T1093] vhci_hcd: release socket [ 221.566761][ T1093] vhci_hcd: disconnect device [ 222.065729][ T29] audit: type=1400 audit(1720225510.435:327): avc: denied { read write } for pid=6160 comm="syz.4.328" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 222.198629][ T29] audit: type=1400 audit(1720225510.505:328): avc: denied { open } for pid=6160 comm="syz.4.328" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 223.575343][ T29] audit: type=1400 audit(1720225511.955:329): avc: denied { create } for pid=6166 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.661093][ T6169] veth1_macvtap: left promiscuous mode [ 223.696862][ T29] audit: type=1400 audit(1720225512.075:330): avc: denied { ioctl } for pid=6166 comm="syz.0.330" path="socket:[12621]" dev="sockfs" ino=12621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.723161][ T6169] macsec0: entered promiscuous mode [ 223.783461][ T6169] macsec0: entered allmulticast mode [ 223.840266][ T6171] veth1_macvtap: entered promiscuous mode [ 223.905746][ T6171] veth1_macvtap: entered allmulticast mode [ 223.912572][ T6171] macsec0: left promiscuous mode [ 224.325553][ T6171] macsec0: left allmulticast mode [ 224.330758][ T6171] veth1_macvtap: left allmulticast mode [ 225.834928][ T6181] libceph: resolve '40' (ret=-3): failed [ 226.249876][ T6192] xt_TCPMSS: Only works on TCP SYN packets [ 228.333714][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 228.333950][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 228.985343][ T29] audit: type=1400 audit(1720225516.005:331): avc: denied { create } for pid=6196 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.985429][ T29] audit: type=1400 audit(1720225516.505:332): avc: denied { append } for pid=6198 comm="syz.2.341" name="001" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.985499][ T29] audit: type=1400 audit(1720225516.575:333): avc: denied { ioctl } for pid=6198 comm="syz.2.341" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.623369][ T29] audit: type=1400 audit(1720225519.005:334): avc: denied { ioctl } for pid=6227 comm="syz.0.349" path="socket:[12250]" dev="sockfs" ino=12250 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.673863][ T6225] veth1_macvtap: left promiscuous mode [ 230.732744][ T6225] macsec0: entered promiscuous mode [ 230.735783][ T29] audit: type=1400 audit(1720225519.055:335): avc: denied { setopt } for pid=6230 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.826939][ T6225] macsec0: entered allmulticast mode [ 230.945354][ T6232] veth1_macvtap: entered promiscuous mode [ 231.125342][ T6232] veth1_macvtap: entered allmulticast mode [ 231.172519][ T6232] macsec0: left promiscuous mode [ 231.200450][ T6232] macsec0: left allmulticast mode [ 231.256336][ T6232] veth1_macvtap: left allmulticast mode [ 231.895216][ T29] audit: type=1400 audit(1720225520.215:336): avc: denied { create } for pid=6243 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.527350][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 235.758053][ T6284] veth1_macvtap: left promiscuous mode [ 235.784759][ T6284] macsec0: entered promiscuous mode [ 235.811931][ T6284] macsec0: entered allmulticast mode [ 235.895470][ T6285] veth1_macvtap: entered promiscuous mode [ 235.901286][ T6285] veth1_macvtap: entered allmulticast mode [ 236.005727][ T6285] macsec0: left promiscuous mode [ 236.025895][ T6285] macsec0: left allmulticast mode [ 236.035563][ T6285] veth1_macvtap: left allmulticast mode [ 236.876064][ T6304] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 237.055857][ T6304] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.372'. [ 237.087012][ T29] audit: type=1400 audit(1720225525.475:337): avc: denied { getopt } for pid=6307 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 238.569875][ T6322] veth1_macvtap: left promiscuous mode [ 238.636221][ T6325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6325 comm=syz.2.374 [ 238.640765][ T6322] macsec0: entered promiscuous mode [ 238.774922][ T6322] macsec0: entered allmulticast mode [ 238.944751][ T6328] veth1_macvtap: entered promiscuous mode [ 239.025168][ T6328] veth1_macvtap: entered allmulticast mode [ 239.075679][ T6328] macsec0: left promiscuous mode [ 239.105571][ T6328] macsec0: left allmulticast mode [ 239.155807][ T6328] veth1_macvtap: left allmulticast mode [ 239.222766][ T6338] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 239.241059][ T6338] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.388'. [ 242.734117][ T6374] CUSE: unknown device info "" [ 242.739236][ T6374] CUSE: unknown device info "appraise_type" [ 242.747462][ T6374] CUSE: DEVNAME unspecified [ 243.058099][ T4477] Bluetooth: hci4: command 0x0406 tx timeout [ 244.065627][ T6387] veth1_macvtap: left promiscuous mode [ 244.105128][ T6387] macsec0: entered promiscuous mode [ 244.113356][ T6387] macsec0: entered allmulticast mode [ 244.230249][ T6391] veth1_macvtap: entered promiscuous mode [ 244.617963][ T6391] veth1_macvtap: entered allmulticast mode [ 244.952878][ T6391] macsec0: left promiscuous mode [ 245.029189][ T6391] macsec0: left allmulticast mode [ 245.034257][ T6391] veth1_macvtap: left allmulticast mode [ 245.307408][ T6401] Zero length message leads to an empty skb [ 245.704671][ T6409] netlink: 198200 bytes leftover after parsing attributes in process `syz.4.410'. [ 245.997100][ T6414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6414 comm=syz.3.401 [ 247.511691][ T29] audit: type=1326 audit(1720225535.865:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa147175bd9 code=0x0 [ 247.592143][ T25] IPVS: starting estimator thread 0... [ 247.789936][ T6444] IPVS: using max 14 ests per chain, 33600 per kthread [ 247.941381][ T6451] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 247.949919][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 248.263691][ T6454] netlink: 198200 bytes leftover after parsing attributes in process `syz.4.424'. [ 248.361532][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 250.076056][ T29] audit: type=1326 audit(1720225538.455:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.1.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdcb175bd9 code=0x0 [ 252.824448][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 253.325678][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 253.629710][ T6505] netlink: 198200 bytes leftover after parsing attributes in process `syz.2.440'. [ 253.736382][ T29] audit: type=1400 audit(1720225542.105:340): avc: denied { write } for pid=6508 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.802387][ T29] audit: type=1400 audit(1720225542.115:341): avc: denied { nlmsg_write } for pid=6508 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.196750][ T29] audit: type=1400 audit(1720225542.585:342): avc: denied { getopt } for pid=6519 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.680282][ T29] audit: type=1400 audit(1720225543.055:343): avc: denied { bind } for pid=6526 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.916909][ T6528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 254.923513][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.979355][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 255.024044][ T6534] vhci_hcd: connection closed [ 255.024485][ T11] vhci_hcd: stop threads [ 255.035501][ T11] vhci_hcd: release socket [ 255.040078][ T11] vhci_hcd: disconnect device [ 256.572283][ T6549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.667473][ T6551] netlink: 198200 bytes leftover after parsing attributes in process `syz.0.455'. [ 257.306846][ T29] audit: type=1400 audit(1720225545.665:344): avc: denied { mount } for pid=6559 comm="syz.0.460" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 257.358606][ T6562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=6562 comm=syz.0.460 [ 258.507076][ T29] audit: type=1400 audit(1720225546.895:345): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 258.666115][ T6585] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 258.672713][ T6585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 258.730193][ T6585] vhci_hcd vhci_hcd.0: Device attached [ 258.748623][ T6590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.875905][ T6587] vhci_hcd: connection closed [ 258.877483][ T3383] vhci_hcd: stop threads [ 258.917180][ T3383] vhci_hcd: release socket [ 258.921676][ T3383] vhci_hcd: disconnect device [ 260.050831][ T6600] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.471'. [ 260.487312][ T29] audit: type=1400 audit(1720225548.865:346): avc: denied { read } for pid=6607 comm="syz.2.473" path="socket:[14821]" dev="sockfs" ino=14821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.467443][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.473835][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.747097][ T6622] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 261.974105][ T6631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=6631 comm=syz.3.478 [ 263.526325][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 264.113027][ T6662] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 264.119631][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.200162][ T6662] vhci_hcd vhci_hcd.0: Device attached [ 264.232323][ T6672] vhci_hcd: connection closed [ 264.232899][ T3383] vhci_hcd: stop threads [ 264.241291][ T6676] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 264.249808][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.494'. [ 264.266425][ T3383] vhci_hcd: release socket [ 264.270906][ T3383] vhci_hcd: disconnect device [ 264.601298][ T6668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=6668 comm=syz.4.491 [ 265.551307][ T5145] kernel write not supported for file /vbi1 (pid: 5145 comm: kworker/1:6) [ 265.619017][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 266.618177][ T29] audit: type=1400 audit(1720225554.785:347): avc: denied { remount } for pid=6697 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 267.255560][ T6713] tipc: Started in network mode [ 267.273049][ T6713] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 267.320792][ T6713] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 267.352259][ T6713] tipc: Enabled bearer , priority 10 [ 267.402006][ T6719] tipc: Enabled bearer , priority 0 [ 267.460532][ T5135] kernel write not supported for file /vbi7 (pid: 5135 comm: kworker/0:6) [ 268.468661][ T5135] tipc: Node number set to 1 [ 268.513254][ T29] audit: type=1400 audit(1720225556.895:348): avc: denied { setopt } for pid=6753 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 268.567446][ T5150] kernel write not supported for file /vbi9 (pid: 5150 comm: kworker/0:7) [ 268.819844][ T6761] tipc: Enabling of bearer rejected, already enabled [ 268.887004][ T6761] tipc: Enabling of bearer rejected, already enabled [ 269.501102][ T4477] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 269.843083][ T6775] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 269.846185][ T5150] kernel write not supported for file /vbi7 (pid: 5150 comm: kworker/0:7) [ 269.865185][ T6775] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 270.172120][ T4477] Bluetooth: hci2: Unknown advertising packet type: 0x70 [ 270.172296][ T4477] Bluetooth: hci2: adv larger than maximum supported [ 270.181537][ T4477] Bluetooth: hci2: Malformed LE Event: 0x0d [ 270.195425][ T29] audit: type=1400 audit(1720225558.585:349): avc: denied { map } for pid=6784 comm="syz.1.538" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 270.335399][ T29] audit: type=1400 audit(1720225558.605:350): avc: denied { rename } for pid=4515 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.411922][ T29] audit: type=1400 audit(1720225558.605:351): avc: denied { unlink } for pid=4515 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.487224][ T29] audit: type=1400 audit(1720225558.645:352): avc: denied { create } for pid=4515 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.570649][ T29] audit: type=1400 audit(1720225558.955:353): avc: denied { getopt } for pid=6795 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 270.664755][ T6799] tipc: Started in network mode [ 270.671699][ T6799] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 270.684825][ T6799] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 270.694930][ T6799] tipc: Enabled bearer , priority 10 [ 270.729623][ T6799] tipc: Enabled bearer , priority 0 [ 271.607702][ T4477] Bluetooth: hci0: command 0x0406 tx timeout [ 271.855336][ T25] tipc: Node number set to 1 [ 272.089519][ T6813] netlink: 45 bytes leftover after parsing attributes in process `syz.1.548'. [ 273.270763][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 273.314143][ T29] audit: type=1400 audit(1720225561.695:354): avc: denied { setopt } for pid=6819 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.789209][ T6838] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[6838] [ 274.936312][ T6845] tipc: Started in network mode [ 274.947545][ T6845] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 274.985626][ T6845] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 274.996860][ T6845] tipc: Enabled bearer , priority 10 [ 275.068583][ T5135] kernel write not supported for file /vbi1 (pid: 5135 comm: kworker/0:6) [ 275.069759][ T6845] tipc: Enabled bearer , priority 0 [ 275.244490][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 275.695253][ T29] audit: type=1400 audit(1720225564.075:355): avc: denied { accept } for pid=6870 comm="syz.0.573" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 275.807321][ T29] audit: type=1400 audit(1720225564.095:356): avc: denied { read } for pid=6870 comm="syz.0.573" laddr=::1 lport=56358 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 275.906825][ T29] audit: type=1400 audit(1720225564.295:357): avc: denied { ioctl } for pid=6875 comm="syz.4.575" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.077106][ T5145] tipc: Node number set to 1 [ 276.156979][ T29] audit: type=1400 audit(1720225564.545:358): avc: denied { mounton } for pid=6875 comm="syz.4.575" path="/126/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 276.705518][ T6881] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 277.497680][ T5085] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 277.894862][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 278.204216][ T6908] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 278.247448][ T6908] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 279.115166][ T5085] Bluetooth: hci5: command 0x0406 tx timeout [ 279.437362][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 281.103917][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 281.174158][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 282.857815][ T29] audit: type=1400 audit(1720225571.235:359): avc: denied { connect } for pid=6954 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.985204][ T29] audit: type=1400 audit(1720225571.335:360): avc: denied { write } for pid=6954 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.100548][ T29] audit: type=1400 audit(1720225571.395:361): avc: denied { create } for pid=6954 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.218869][ T29] audit: type=1400 audit(1720225571.435:362): avc: denied { bind } for pid=6954 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.705667][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 284.965466][ T5132] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 285.322157][ T7000] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 285.351235][ T7004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.383638][ T29] audit: type=1400 audit(1720225573.765:363): avc: denied { setopt } for pid=6999 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 285.466296][ T5132] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 285.492465][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.509019][ T5132] usb 3-1: Product: syz [ 285.513432][ T5132] usb 3-1: Manufacturer: syz [ 285.519654][ T5132] usb 3-1: SerialNumber: syz [ 285.571440][ T5132] usb 3-1: config 0 descriptor?? [ 286.030313][ T5132] usb 3-1: USB disconnect, device number 3 [ 286.091142][ T29] audit: type=1400 audit(1720225574.475:364): avc: denied { search } for pid=4515 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.288428][ T7023] capability: warning: `syz.4.626' uses 32-bit capabilities (legacy support in use) [ 289.204644][ T7045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.797591][ T7052] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 289.804274][ T7052] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 289.895378][ T7052] vhci_hcd vhci_hcd.0: Device attached [ 289.969841][ T7066] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 290.005230][ T7058] vhci_hcd: connection closed [ 290.015672][ T82] vhci_hcd: stop threads [ 290.029925][ T7055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=7055 comm=syz.0.637 [ 290.045187][ T7066] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 290.065202][ T82] vhci_hcd: release socket [ 290.107357][ T82] vhci_hcd: disconnect device [ 290.342530][ T29] audit: type=1326 audit(1720225578.725:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.4.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2146d75bd9 code=0x0 [ 290.698972][ T29] audit: type=1400 audit(1720225579.085:366): avc: denied { map } for pid=7076 comm="syz.1.645" path="socket:[15928]" dev="sockfs" ino=15928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.748976][ T5150] usb usb14-port1: attempt power cycle [ 290.753692][ T29] audit: type=1400 audit(1720225579.085:367): avc: denied { read write } for pid=7076 comm="syz.1.645" path="socket:[15928]" dev="sockfs" ino=15928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.850002][ T7079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.986209][ T29] audit: type=1400 audit(1720225579.375:368): avc: denied { getopt } for pid=7082 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.323540][ T7098] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 291.323601][ T29] audit: type=1400 audit(1720225579.705:369): avc: denied { map } for pid=7096 comm="syz.1.654" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.349287][ T7098] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 291.410056][ T29] audit: type=1400 audit(1720225579.745:370): avc: denied { execute } for pid=7096 comm="syz.1.654" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.445116][ T5150] usb usb14-port1: unable to enumerate USB device [ 292.938857][ T7112] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 292.945547][ T7112] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 292.984732][ T7112] vhci_hcd vhci_hcd.0: Device attached [ 293.045830][ T7113] vhci_hcd: connection closed [ 293.056317][ T12] vhci_hcd: stop threads [ 293.079978][ T12] vhci_hcd: release socket [ 293.099536][ T12] vhci_hcd: disconnect device [ 293.520905][ T4477] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 293.696366][ T29] audit: type=1400 audit(1720225581.985:371): avc: denied { shutdown } for pid=7124 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.590705][ T7134] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 294.619323][ T7127] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 294.621569][ T7134] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 294.644932][ T7127] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 295.256123][ T4477] Bluetooth: hci4: command 0x0406 tx timeout [ 295.571792][ T29] audit: type=1400 audit(1720225583.955:372): avc: denied { setopt } for pid=7159 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.115385][ T7163] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 296.140308][ T7163] netlink: 132 bytes leftover after parsing attributes in process `syz.3.681'. [ 296.571215][ T29] audit: type=1400 audit(1720225584.945:373): avc: denied { bind } for pid=7159 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.619876][ T29] audit: type=1400 audit(1720225584.955:374): avc: denied { write } for pid=7159 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.639456][ T7158] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 296.809277][ T29] audit: type=1400 audit(1720225585.165:375): avc: denied { setopt } for pid=7172 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 296.882556][ T29] audit: type=1400 audit(1720225585.165:376): avc: denied { bind } for pid=7172 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 296.985668][ T29] audit: type=1400 audit(1720225585.175:377): avc: denied { getopt } for pid=7172 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 297.588765][ T7191] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 298.567501][ T5134] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.985903][ T5134] usb 2-1: Using ep0 maxpacket: 32 [ 299.195364][ T5134] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 299.230845][ T5134] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 299.249669][ T5134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.265852][ T5134] usb 2-1: Product: syz [ 299.299380][ T5134] usb 2-1: Manufacturer: syz [ 299.894866][ T5134] usb 2-1: SerialNumber: syz [ 300.367287][ T5134] usb 2-1: config 0 descriptor?? [ 300.373969][ T7193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.439008][ T5134] hub 2-1:0.0: bad descriptor, ignoring hub [ 300.444951][ T5134] hub 2-1:0.0: probe with driver hub failed with error -5 [ 300.512298][ T5134] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 300.691136][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 300.733231][ T7207] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 300.734127][ T5134] usb 2-1: USB disconnect, device number 3 [ 300.776026][ T7207] netlink: 132 bytes leftover after parsing attributes in process `syz.3.694'. [ 301.771233][ T29] audit: type=1400 audit(1720225590.155:378): avc: denied { listen } for pid=7227 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.163726][ T7239] netlink: 'syz.4.709': attribute type 10 has an invalid length. [ 302.171817][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.709'. [ 302.349775][ T52] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 302.555225][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 302.661692][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 302.773006][ T52] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 302.874782][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.905627][ T29] audit: type=1400 audit(1720225591.285:379): avc: denied { write } for pid=7248 comm="syz.0.713" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 303.007259][ T7264] fuse: Bad value for 'fd' [ 303.070369][ T52] usb 2-1: Product: syz [ 303.141049][ T52] usb 2-1: Manufacturer: syz [ 303.257397][ T52] usb 2-1: SerialNumber: syz [ 303.388288][ T52] usb 2-1: config 0 descriptor?? [ 303.408481][ T7236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.423786][ T52] hub 2-1:0.0: bad descriptor, ignoring hub [ 303.442620][ T52] hub 2-1:0.0: probe with driver hub failed with error -5 [ 303.497828][ T52] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 305.263638][ T5134] usb 2-1: USB disconnect, device number 4 [ 305.263707][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 305.316949][ T7277] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 305.331343][ T7277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.723'. [ 308.257447][ T7309] netlink: 2300 bytes leftover after parsing attributes in process `syz.3.737'. [ 308.289176][ T7318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.736'. [ 308.372713][ T29] audit: type=1400 audit(1720225596.735:380): avc: denied { listen } for pid=7308 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.745823][ T29] audit: type=1400 audit(1720225600.125:381): avc: denied { connect } for pid=7349 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 312.327003][ T7356] netlink: 2300 bytes leftover after parsing attributes in process `syz.4.752'. [ 313.186264][ T29] audit: type=1400 audit(1720225601.535:382): avc: denied { watch_reads } for pid=7367 comm="syz.0.756" path="/177" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 313.216880][ T7370] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.959470][ T4477] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 314.006681][ T7394] netlink: 224 bytes leftover after parsing attributes in process `syz.4.766'. [ 314.548093][ T7391] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 314.560125][ T7402] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 314.610158][ T29] audit: type=1400 audit(1720225602.985:383): avc: denied { connect } for pid=7398 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 314.668602][ T7391] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 314.776560][ T29] audit: type=1400 audit(1720225603.095:384): avc: denied { read } for pid=7398 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 314.863443][ T29] audit: type=1400 audit(1720225603.245:385): avc: denied { write } for pid=7398 comm="syz.4.767" path="socket:[17232]" dev="sockfs" ino=17232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.281847][ T29] audit: type=1400 audit(1720225603.655:386): avc: denied { ioctl } for pid=7407 comm="syz.2.769" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 315.504519][ T29] audit: type=1400 audit(1720225603.885:387): avc: denied { setopt } for pid=7414 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.773912][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'. [ 315.866877][ T4477] Bluetooth: hci5: command 0x0406 tx timeout [ 317.320164][ T7431] netlink: 224 bytes leftover after parsing attributes in process `syz.0.777'. [ 317.838871][ T29] audit: type=1400 audit(1720225606.225:388): avc: denied { ioctl } for pid=7448 comm="syz.0.785" path="socket:[17311]" dev="sockfs" ino=17311 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.907220][ T29] audit: type=1400 audit(1720225606.285:389): avc: denied { append } for pid=7448 comm="syz.0.785" name="nbd0" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.986407][ T7453] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 318.324324][ T29] audit: type=1326 audit(1720225606.705:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 318.593099][ T29] audit: type=1326 audit(1720225606.705:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 319.057108][ T7459] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.832990][ T29] audit: type=1326 audit(1720225608.195:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 319.853602][ T7456] input: syz0 as /devices/virtual/input/input14 [ 319.970911][ T29] audit: type=1326 audit(1720225608.195:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.053486][ T29] audit: type=1326 audit(1720225608.195:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.135464][ T29] audit: type=1326 audit(1720225608.215:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.249001][ T29] audit: type=1326 audit(1720225608.215:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.277781][ T29] audit: type=1326 audit(1720225608.215:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.358824][ T29] audit: type=1326 audit(1720225608.215:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.439874][ T4477] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 320.525255][ T29] audit: type=1326 audit(1720225608.215:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.640394][ T29] audit: type=1326 audit(1720225608.215:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.700710][ T29] audit: type=1326 audit(1720225608.215:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f044e575bd9 code=0x7ffc0000 [ 320.855315][ T7469] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 320.864580][ T7469] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 322.203258][ T4477] Bluetooth: hci2: command 0x0406 tx timeout [ 323.845456][ T7501] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.567067][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.968259][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 325.968283][ T29] audit: type=1400 audit(1720225614.355:408): avc: denied { create } for pid=7511 comm="syz.3.803" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.035530][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 326.053623][ T29] audit: type=1400 audit(1720225614.375:409): avc: denied { read } for pid=7511 comm="syz.3.803" name="file0" dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.116167][ T29] audit: type=1400 audit(1720225614.375:410): avc: denied { open } for pid=7511 comm="syz.3.803" path="/116/file0" dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.194135][ T29] audit: type=1400 audit(1720225614.395:411): avc: denied { ioctl } for pid=7511 comm="syz.3.803" path="/116/file0" dev="tmpfs" ino=623 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.281488][ T29] audit: type=1400 audit(1720225614.465:412): avc: denied { unlink } for pid=5278 comm="syz-executor" name="file0" dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.319871][ T45] usb 3-1: config index 0 descriptor too short (expected 37873, got 36) [ 326.346070][ T45] usb 3-1: config 162 has too many interfaces: 227, using maximum allowed: 32 [ 326.375138][ T45] usb 3-1: config 162 has an invalid descriptor of length 137, skipping remainder of the config [ 326.386255][ T29] audit: type=1400 audit(1720225614.535:413): avc: denied { mount } for pid=7515 comm="syz.1.805" name="/" dev="hugetlbfs" ino=17603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 326.416936][ T45] usb 3-1: config 162 has 0 interfaces, different from the descriptor's value: 227 [ 326.542823][ T29] audit: type=1400 audit(1720225614.705:414): avc: denied { unmount } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 326.775913][ T45] usb 3-1: language id specifier not provided by device, defaulting to English [ 326.806664][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 327.609511][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.617710][ T45] usb 3-1: Product: syz [ 327.621928][ T45] usb 3-1: Manufacturer: 闈帮互鍌栣厖銥村布毹娺п毃绛ㄩ创銤霠冭垔闄岀潿俣瀵ユ反椐栰姬峒差府惘╄瓍惘傊噾飸丰稖閹ｄ煉幔囬倹嗑解皑辎吪﹃倷靹惧炧、顣夅厳頌嬩捄饪版尡 [ 327.640237][ T45] usb 3-1: SerialNumber: syz [ 327.665884][ T45] usb 3-1: can't set config #162, error -71 [ 327.674612][ T45] usb 3-1: USB disconnect, device number 4 [ 327.885593][ T7553] netlink: 100 bytes leftover after parsing attributes in process `syz.4.820'. [ 327.960939][ T7553] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 327.967534][ T7553] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 328.032096][ T7553] vhci_hcd vhci_hcd.0: Device attached [ 328.305293][ T45] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 328.343877][ T29] audit: type=1326 audit(1720225616.725:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.1.827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdcb175bd9 code=0x0 [ 328.405498][ T5132] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 328.487733][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'. [ 328.518003][ T7580] Bluetooth: MGMT ver 1.22 [ 328.615578][ T5132] usb 5-1: Using ep0 maxpacket: 32 [ 328.641088][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 328.695921][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 328.728625][ T5132] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 328.779283][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.814684][ T5132] usb 5-1: config 0 descriptor?? [ 328.837839][ T7553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.868942][ T5132] hub 5-1:0.0: USB hub found [ 329.103311][ T5132] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 329.162725][ T7580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.199947][ T7580] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 329.299009][ T7580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.326508][ T7580] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 329.364042][ T7580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.390319][ T7580] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 329.451211][ T5132] hid-generic 0003:046D:C314.0001: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 331.405501][ T7580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.411479][ T7580] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 331.438647][ T7580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 331.453539][ T7580] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 331.789350][ T7628] pim6reg1: entered promiscuous mode [ 331.802348][ T7628] pim6reg1: entered allmulticast mode [ 333.574889][ T29] audit: type=1400 audit(1720225621.955:416): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 333.626495][ T7659] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 333.658983][ T7659] CIFS mount error: No usable UNC path provided in device string! [ 333.658983][ T7659] [ 333.670915][ T7659] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 334.978560][ T7689] CIFS mount error: No usable UNC path provided in device string! [ 334.978560][ T7689] [ 335.033257][ T7689] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.786399][ T5217] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 336.015308][ T5217] usb 4-1: Using ep0 maxpacket: 8 [ 336.038625][ T5217] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 336.052668][ T29] audit: type=1400 audit(1720225624.385:417): avc: denied { view } for pid=7697 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.054641][ T5217] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.121732][ T5217] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.133982][ T5217] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.146031][ T5217] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.173839][ T5217] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.183988][ T5217] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 336.195199][ T5217] usb 4-1: Product: syz [ 336.533336][ T5217] usb 4-1: usb_control_msg returned -32 [ 336.549935][ T5217] usbtmc 4-1:16.0: can't read capabilities [ 336.735658][ T5134] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 336.914308][ T7711] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 336.926465][ T5134] usb 3-1: Using ep0 maxpacket: 8 [ 336.934087][ T5134] usb 3-1: config 0 has no interfaces? [ 336.943586][ T5134] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.956689][ T5134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.976148][ T5134] usb 3-1: Product: syz [ 336.980374][ T5134] usb 3-1: Manufacturer: syz [ 336.992403][ T5134] usb 3-1: SerialNumber: syz [ 337.009240][ T5134] usb 3-1: config 0 descriptor?? [ 337.075510][ T5134] usb 4-1: USB disconnect, device number 5 [ 337.433794][ T5217] usb 3-1: USB disconnect, device number 5 [ 337.517443][ T7714] kvm: emulating exchange as write [ 340.121890][ T29] audit: type=1326 audit(1720225628.505:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.2.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d1175bd9 code=0x0 [ 340.270849][ T5134] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 340.645633][ T5134] usb 1-1: Using ep0 maxpacket: 8 [ 340.707545][ T5134] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 340.753982][ T5134] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.844009][ T5134] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.886042][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.891'. [ 340.908102][ T5134] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.935038][ T5134] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.980156][ T5134] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.995026][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 341.003250][ T5134] usb 1-1: Product: syz [ 341.271223][ T5134] usb 1-1: usb_control_msg returned -32 [ 341.281061][ T5134] usbtmc 1-1:16.0: can't read capabilities [ 341.641873][ T7752] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 341.686627][ T5134] usb 1-1: USB disconnect, device number 3 [ 384.348668][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.780593][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 488.021238][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 488.029056][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 488.037584][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.048092][ T30] task:kworker/1:0 state:D stack:25296 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 488.058459][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 488.065972][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 488.069302][ T30] [ 488.072274][ T30] __schedule+0xf15/0x5d00 [ 488.089338][ T30] ? __pfx_mark_lock+0x10/0x10 [ 488.094217][ T30] ? __pfx___schedule+0x10/0x10 [ 488.131228][ T30] ? schedule+0x298/0x350 [ 488.141668][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.150262][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.163088][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.168546][ T30] schedule+0xe7/0x350 [ 488.172682][ T30] schedule_preempt_disabled+0x13/0x30 [ 488.215615][ T30] __mutex_lock+0x5b8/0x9c0 [ 488.220221][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 488.230606][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 488.239119][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 488.246649][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 488.252880][ T30] process_one_work+0x9c5/0x1b40 [ 488.258123][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 488.263243][ T30] ? __pfx_process_one_work+0x10/0x10 [ 488.270542][ T30] ? assign_work+0x1a0/0x250 [ 488.275926][ T30] worker_thread+0x6c8/0xf30 [ 488.280581][ T30] ? __pfx_worker_thread+0x10/0x10 [ 488.285975][ T30] kthread+0x2c1/0x3a0 [ 488.290101][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.295394][ T30] ? __pfx_kthread+0x10/0x10 [ 488.300034][ T30] ret_from_fork+0x45/0x80 [ 488.304477][ T30] ? __pfx_kthread+0x10/0x10 [ 488.309773][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.314603][ T30] [ 488.318100][ T30] INFO: task kworker/1:1:45 blocked for more than 143 seconds. [ 488.326367][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 488.334046][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.348582][ T30] task:kworker/1:1 state:D stack:25328 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 488.359094][ T30] Workqueue: usb_hub_wq hub_event [ 488.364183][ T30] Call Trace: [ 488.368124][ T30] [ 488.371114][ T30] __schedule+0xf15/0x5d00 [ 488.375691][ T30] ? __pfx_mark_lock+0x10/0x10 [ 488.380518][ T30] ? __pfx___schedule+0x10/0x10 [ 488.387166][ T30] ? schedule+0x298/0x350 [ 488.391553][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.397116][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.402332][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.407636][ T30] schedule+0xe7/0x350 [ 488.411749][ T30] usb_kill_urb.part.0+0x1ca/0x250 [ 488.417392][ T30] ? __pfx_usb_kill_urb.part.0+0x10/0x10 [ 488.423081][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 488.431150][ T30] ? __pfx___might_resched+0x10/0x10 [ 488.436562][ T30] usb_kill_urb+0x83/0xa0 [ 488.440947][ T30] usb_start_wait_urb+0x255/0x4c0 [ 488.446380][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 488.452010][ T30] ? __asan_memset+0x23/0x50 [ 488.460956][ T30] usb_control_msg+0x327/0x4b0 [ 488.465862][ T30] ? __pfx_usb_control_msg+0x10/0x10 [ 488.471203][ T30] ? __pfx_hub_port_reset+0x10/0x10 [ 488.476535][ T30] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 488.482678][ T30] hub_port_init+0x693/0x3a50 [ 488.487992][ T30] hub_event+0x2b65/0x4e20 [ 488.492437][ T30] ? __pfx_hub_event+0x10/0x10 [ 488.497825][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 488.502931][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.508619][ T30] process_one_work+0x9c5/0x1b40 [ 488.513637][ T30] ? __pfx_hcd_resume_work+0x10/0x10 [ 488.519083][ T30] ? __pfx_process_one_work+0x10/0x10 [ 488.524509][ T30] ? assign_work+0x1a0/0x250 [ 488.529312][ T30] worker_thread+0x6c8/0xf30 [ 488.533950][ T30] ? __kthread_parkme+0x148/0x220 [ 488.539069][ T30] ? __pfx_worker_thread+0x10/0x10 [ 488.544221][ T30] kthread+0x2c1/0x3a0 [ 488.548430][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.553678][ T30] ? __pfx_kthread+0x10/0x10 [ 488.558421][ T30] ret_from_fork+0x45/0x80 [ 488.562896][ T30] ? __pfx_kthread+0x10/0x10 [ 488.567708][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.572551][ T30] [ 488.575966][ T30] INFO: task syz.4.820:7552 blocked for more than 143 seconds. [ 488.583577][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 488.592124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.601375][ T30] task:syz.4.820 state:D stack:26304 pid:7552 tgid:7552 ppid:5080 flags:0x00004006 [ 488.613368][ T30] Call Trace: [ 488.616960][ T30] [ 488.619947][ T30] __schedule+0xf15/0x5d00 [ 488.624411][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 488.629856][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 488.635812][ T30] ? __pfx___schedule+0x10/0x10 [ 488.640715][ T30] ? schedule+0x298/0x350 [ 488.647087][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.652194][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 488.657107][ T30] ? __mutex_trylock_common+0x78/0x250 [ 488.662642][ T30] schedule+0xe7/0x350 [ 488.667488][ T30] schedule_preempt_disabled+0x13/0x30 [ 488.673010][ T30] __mutex_lock+0x5b8/0x9c0 [ 488.680880][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 488.686496][ T30] ? rfkill_unregister+0xde/0x2c0 [ 488.691707][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 488.698147][ T30] ? device_del+0x6b6/0x9f0 [ 488.702740][ T30] ? __pfx_device_del+0x10/0x10 [ 488.708212][ T30] ? rfkill_unregister+0xde/0x2c0 [ 488.713330][ T30] rfkill_unregister+0xde/0x2c0 [ 488.718729][ T30] nfc_unregister_device+0x94/0x330 [ 488.724004][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 488.729978][ T30] virtual_ncidev_close+0x51/0xb0 [ 488.736594][ T30] __fput+0x408/0xbb0 [ 488.740669][ T30] task_work_run+0x14e/0x250 [ 488.745462][ T30] ? __pfx_task_work_run+0x10/0x10 [ 488.750768][ T30] ? xfd_validate_state+0x5d/0x180 [ 488.757907][ T30] syscall_exit_to_user_mode+0x275/0x2a0 [ 488.763614][ T30] do_syscall_64+0xda/0x250 [ 488.768641][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.774567][ T30] RIP: 0033:0x7f2146d75bd9 [ 488.779073][ T30] RSP: 002b:00007ffedaa9dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 488.791299][ T30] RAX: 0000000000000000 RBX: 00007f2146f05a60 RCX: 00007f2146d75bd9 [ 488.800015][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 488.808065][ T30] RBP: 00007f2146f05a60 R08: 0000000000000006 R09: 0000001ddaa9df9f [ 488.816950][ T30] R10: 00000000003ff800 R11: 0000000000000246 R12: 000000000005136c [ 488.826069][ T30] R13: 0000000000000032 R14: 00007f2146f05a60 R15: 00007f2146f04038 [ 488.834103][ T30] [ 488.837697][ T30] INFO: task syz.1.827:7580 blocked for more than 144 seconds. [ 488.845514][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 488.853159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.861907][ T30] task:syz.1.827 state:D stack:24080 pid:7580 tgid:7574 ppid:5082 flags:0x00004006 [ 488.872222][ T30] Call Trace: [ 488.875643][ T30] [ 488.878613][ T30] __schedule+0xf15/0x5d00 [ 488.883075][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 488.888377][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 488.893640][ T30] ? __pfx___schedule+0x10/0x10 [ 488.898617][ T30] ? schedule+0x298/0x350 [ 488.902989][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.908130][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 488.912866][ T30] ? __mutex_trylock_common+0x78/0x250 [ 488.918591][ T30] schedule+0xe7/0x350 [ 488.922737][ T30] schedule_preempt_disabled+0x13/0x30 [ 488.928278][ T30] __mutex_lock+0x5b8/0x9c0 [ 488.932852][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 488.938087][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 488.943169][ T30] ? find_held_lock+0x2d/0x110 [ 488.948034][ T30] ? rfkill_set_block+0x198/0x560 [ 488.953149][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.958352][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 488.963000][ T30] nfc_dev_down+0x2d/0x2e0 [ 488.967579][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 488.972664][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 488.978473][ T30] rfkill_set_block+0x203/0x560 [ 488.983388][ T30] rfkill_fop_write+0x2d4/0x570 [ 488.988428][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 488.993880][ T30] ? security_file_permission+0x40/0xc0 [ 488.999613][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 489.005085][ T30] vfs_write+0x29a/0x1140 [ 489.009470][ T30] ? __pfx_vfs_write+0x10/0x10 [ 489.014282][ T30] ? do_futex+0x123/0x350 [ 489.018751][ T30] ? __fget_files+0x256/0x400 [ 489.023481][ T30] ? __fget_light+0x173/0x210 [ 489.028310][ T30] ksys_write+0x1f8/0x260 [ 489.032710][ T30] ? __pfx_ksys_write+0x10/0x10 [ 489.037730][ T30] do_syscall_64+0xcd/0x250 [ 489.042298][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.048365][ T30] RIP: 0033:0x7efdcb175bd9 [ 489.052865][ T30] RSP: 002b:00007efdcbe9a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.062285][ T30] RAX: ffffffffffffffda RBX: 00007efdcb304038 RCX: 00007efdcb175bd9 [ 489.071225][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000005 [ 489.079625][ T30] RBP: 00007efdcb1e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 489.087859][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.096097][ T30] R13: 000000000000006e R14: 00007efdcb304038 R15: 00007fff31ae0ee8 [ 489.104110][ T30] [ 489.107309][ T30] INFO: task syz-executor:7733 blocked for more than 144 seconds. [ 489.115278][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 489.122956][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.131879][ T30] task:syz-executor state:D stack:28608 pid:7733 tgid:7733 ppid:1 flags:0x00000004 [ 489.143238][ T30] Call Trace: [ 489.146703][ T30] [ 489.149676][ T30] __schedule+0xf15/0x5d00 [ 489.154155][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.159571][ T30] ? bpf_trace_run2+0x2a6/0x590 [ 489.164490][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.169813][ T30] ? __pfx_bpf_trace_run2+0x10/0x10 [ 489.175150][ T30] ? __pfx___schedule+0x10/0x10 [ 489.180061][ T30] ? schedule+0x298/0x350 [ 489.184440][ T30] ? __pfx_lock_release+0x10/0x10 [ 489.189656][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 489.194392][ T30] ? __mutex_trylock_common+0x78/0x250 [ 489.200067][ T30] schedule+0xe7/0x350 [ 489.204186][ T30] schedule_preempt_disabled+0x13/0x30 [ 489.210590][ T30] __mutex_lock+0x5b8/0x9c0 [ 489.218714][ T30] ? rfkill_register+0x3a/0xb40 [ 489.223632][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 489.228835][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 489.234365][ T30] ? __init_waitqueue_head+0xca/0x150 [ 489.239851][ T30] ? rfkill_register+0x3a/0xb40 [ 489.244743][ T30] ? rfkill_alloc+0x25b/0x330 [ 489.250092][ T30] rfkill_register+0x3a/0xb40 [ 489.254793][ T30] hci_register_dev+0x3cc/0xc60 [ 489.263119][ T30] __vhci_create_device+0x357/0x7e0 [ 489.268451][ T30] vhci_write+0x2c7/0x470 [ 489.272818][ T30] vfs_write+0x6b6/0x1140 [ 489.279474][ T30] ? __pfx_vhci_write+0x10/0x10 [ 489.284381][ T30] ? __pfx_vfs_write+0x10/0x10 [ 489.289239][ T30] ? find_held_lock+0x59/0x110 [ 489.294063][ T30] ? find_held_lock+0x2d/0x110 [ 489.299468][ T30] ? do_user_addr_fault+0x6d7/0xe50 [ 489.304736][ T30] ? __fget_light+0x173/0x210 [ 489.312161][ T30] ksys_write+0x12f/0x260 [ 489.316914][ T30] ? __pfx_ksys_write+0x10/0x10 [ 489.321831][ T30] do_syscall_64+0xcd/0x250 [ 489.326940][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.332911][ T30] RIP: 0033:0x7f2f11b74720 [ 489.337701][ T30] RSP: 002b:00007ffd760522d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 489.346834][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2f11b74720 [ 489.354825][ T30] RDX: 0000000000000002 RSI: 00007ffd760522ea RDI: 00000000000000ca [ 489.362868][ T30] RBP: 00007f2f11d04a18 R08: 0000000000000000 R09: 00007f2f1283d6c0 [ 489.371072][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 489.382255][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 489.390500][ T30] [ 489.393585][ T30] INFO: task syz.2.891:7741 blocked for more than 144 seconds. [ 489.402510][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 489.410328][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.419090][ T30] task:syz.2.891 state:D stack:27408 pid:7741 tgid:7740 ppid:5407 flags:0x00000004 [ 489.429463][ T30] Call Trace: [ 489.432778][ T30] [ 489.435874][ T30] __schedule+0xf15/0x5d00 [ 489.440351][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.445746][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.451009][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 489.456647][ T30] ? __pfx___schedule+0x10/0x10 [ 489.461528][ T30] ? schedule+0x298/0x350 [ 489.466085][ T30] ? __pfx_lock_release+0x10/0x10 [ 489.471276][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 489.476124][ T30] ? __mutex_trylock_common+0x78/0x250 [ 489.481656][ T30] schedule+0xe7/0x350 [ 489.485861][ T30] schedule_preempt_disabled+0x13/0x30 [ 489.491375][ T30] __mutex_lock+0x5b8/0x9c0 [ 489.496010][ T30] ? rfkill_fop_open+0x13b/0x750 [ 489.500989][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 489.506182][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 489.511719][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 489.517157][ T30] ? rfkill_fop_open+0x13b/0x750 [ 489.522135][ T30] rfkill_fop_open+0x13b/0x750 [ 489.527026][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 489.532709][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 489.538122][ T30] misc_open+0x3da/0x4c0 [ 489.542434][ T30] ? __pfx_misc_open+0x10/0x10 [ 489.547341][ T30] chrdev_open+0x26d/0x6f0 [ 489.552330][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 489.557445][ T30] ? security_file_open+0x9d/0x8b0 [ 489.562608][ T30] do_dentry_open+0x91f/0x15f0 [ 489.567490][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 489.572497][ T30] ? inode_permission+0xdd/0x5f0 [ 489.577608][ T30] vfs_open+0x82/0x3f0 [ 489.581706][ T30] ? may_open+0x1f2/0x400 [ 489.586134][ T30] path_openat+0x21fc/0x2e50 [ 489.590796][ T30] ? __pfx_path_openat+0x10/0x10 [ 489.595899][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.601171][ T30] ? find_held_lock+0x2d/0x110 [ 489.606123][ T30] do_filp_open+0x1dc/0x430 [ 489.610748][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 489.616015][ T30] ? find_held_lock+0x2d/0x110 [ 489.620846][ T30] ? _raw_spin_unlock+0x28/0x50 [ 489.625791][ T30] ? alloc_fd+0x2d7/0x6c0 [ 489.630183][ T30] do_sys_openat2+0x17a/0x1e0 [ 489.635117][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.640374][ T30] __x64_sys_openat+0x175/0x210 [ 489.645326][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.650755][ T30] do_syscall_64+0xcd/0x250 [ 489.655427][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.661388][ T30] RIP: 0033:0x7fe2d1175bd9 [ 489.665890][ T30] RSP: 002b:00007fe2d1ec0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.674384][ T30] RAX: ffffffffffffffda RBX: 00007fe2d1303f60 RCX: 00007fe2d1175bd9 [ 489.682494][ T30] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 489.690616][ T30] RBP: 00007fe2d11e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 489.699093][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.707193][ T30] R13: 000000000000000b R14: 00007fe2d1303f60 R15: 00007ffc7962a648 [ 489.715331][ T30] [ 489.718407][ T30] INFO: task syz.3.892:7746 blocked for more than 145 seconds. [ 489.726165][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 489.733834][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.742591][ T30] task:syz.3.892 state:D stack:26992 pid:7746 tgid:7745 ppid:5278 flags:0x00000004 [ 489.752856][ T30] Call Trace: [ 489.756284][ T30] [ 489.759255][ T30] __schedule+0xf15/0x5d00 [ 489.763741][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.769059][ T30] ? __pfx___schedule+0x10/0x10 [ 489.773953][ T30] ? schedule+0x298/0x350 [ 489.778393][ T30] ? __pfx_lock_release+0x10/0x10 [ 489.783472][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 489.788250][ T30] ? __mutex_trylock_common+0x78/0x250 [ 489.793775][ T30] schedule+0xe7/0x350 [ 489.798021][ T30] schedule_preempt_disabled+0x13/0x30 [ 489.803540][ T30] __mutex_lock+0x5b8/0x9c0 [ 489.808149][ T30] ? misc_open+0x59/0x4c0 [ 489.812645][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 489.817798][ T30] ? __pfx_lock_release+0x10/0x10 [ 489.822886][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 489.828658][ T30] ? misc_open+0x59/0x4c0 [ 489.833044][ T30] misc_open+0x59/0x4c0 [ 489.837357][ T30] ? __pfx_misc_open+0x10/0x10 [ 489.842184][ T30] chrdev_open+0x26d/0x6f0 [ 489.846705][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 489.851713][ T30] ? security_file_open+0x9d/0x8b0 [ 489.856984][ T30] do_dentry_open+0x91f/0x15f0 [ 489.861865][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 489.866975][ T30] ? inode_permission+0xdd/0x5f0 [ 489.871980][ T30] vfs_open+0x82/0x3f0 [ 489.876205][ T30] ? may_open+0x1f2/0x400 [ 489.880628][ T30] path_openat+0x21fc/0x2e50 [ 489.885346][ T30] ? __pfx_path_openat+0x10/0x10 [ 489.890345][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 489.895679][ T30] ? find_held_lock+0x2d/0x110 [ 489.900489][ T30] do_filp_open+0x1dc/0x430 [ 489.905126][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 489.910213][ T30] ? find_held_lock+0x2d/0x110 [ 489.915153][ T30] ? _raw_spin_unlock+0x28/0x50 [ 489.920045][ T30] ? alloc_fd+0x2d7/0x6c0 [ 489.924400][ T30] do_sys_openat2+0x17a/0x1e0 [ 489.929193][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.934442][ T30] ? do_user_addr_fault+0x6d7/0xe50 [ 489.939869][ T30] __x64_sys_openat+0x175/0x210 [ 489.944773][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.950337][ T30] do_syscall_64+0xcd/0x250 [ 489.955133][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.961108][ T30] RIP: 0033:0x7fa147174610 [ 489.965604][ T30] RSP: 002b:00007fa147fc0f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 489.974063][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa147174610 [ 489.982109][ T30] RDX: 0000000000000002 RSI: 00007fa1471e331c RDI: 00000000ffffff9c [ 489.990222][ T30] RBP: 00007fa1471e331c R08: 0000000000000000 R09: 0000000000000000 [ 489.998293][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 490.006465][ T30] R13: 0000000000000071 R14: 0000000020000540 R15: 00007ffebbb886b8 [ 490.014500][ T30] [ 490.017672][ T30] INFO: task syz-executor:7747 blocked for more than 145 seconds. [ 490.025562][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 490.033306][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.042053][ T30] task:syz-executor state:D stack:27392 pid:7747 tgid:7747 ppid:1 flags:0x00004004 [ 490.052330][ T30] Call Trace: [ 490.055740][ T30] [ 490.058712][ T30] __schedule+0xf15/0x5d00 [ 490.063161][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 490.068496][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 490.073754][ T30] ? __pfx___schedule+0x10/0x10 [ 490.078719][ T30] ? schedule+0x298/0x350 [ 490.083096][ T30] ? __pfx_lock_release+0x10/0x10 [ 490.088227][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 490.092954][ T30] ? __mutex_trylock_common+0x78/0x250 [ 490.098533][ T30] schedule+0xe7/0x350 [ 490.102649][ T30] schedule_preempt_disabled+0x13/0x30 [ 490.108203][ T30] __mutex_lock+0x5b8/0x9c0 [ 490.112815][ T30] ? misc_open+0x59/0x4c0 [ 490.117334][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 490.122418][ T30] ? __pfx_lock_release+0x10/0x10 [ 490.127667][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 490.133360][ T30] ? misc_open+0x59/0x4c0 [ 490.137805][ T30] misc_open+0x59/0x4c0 [ 490.142026][ T30] ? __pfx_misc_open+0x10/0x10 [ 490.146887][ T30] chrdev_open+0x26d/0x6f0 [ 490.151370][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 490.156485][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 490.161492][ T30] ? chrdev_open+0x16/0x6f0 [ 490.166173][ T30] do_dentry_open+0x91f/0x15f0 [ 490.170999][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 490.177685][ T30] vfs_open+0x82/0x3f0 [ 490.181813][ T30] path_openat+0x21fc/0x2e50 [ 490.186561][ T30] ? __schedule+0xf1d/0x5d00 [ 490.191208][ T30] ? __pfx_path_openat+0x10/0x10 [ 490.196247][ T30] do_filp_open+0x1dc/0x430 [ 490.200804][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 490.205930][ T30] ? _raw_spin_unlock+0x3e/0x50 [ 490.210832][ T30] ? alloc_fd+0x2d7/0x6c0 [ 490.215275][ T30] do_sys_openat2+0x17a/0x1e0 [ 490.220084][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.225401][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 490.230815][ T30] ? fd_install+0x242/0x750 [ 490.235426][ T30] ? fd_install+0x555/0x750 [ 490.239980][ T30] ? fd_install+0x55a/0x750 [ 490.244530][ T30] __x64_sys_openat+0x175/0x210 [ 490.249501][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.255571][ T30] do_syscall_64+0xcd/0x250 [ 490.260149][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.266174][ T30] RIP: 0033:0x7fd214774591 [ 490.270637][ T30] RSP: 002b:00007ffdee1207a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 490.279165][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd214774591 [ 490.287263][ T30] RDX: 0000000000000002 RSI: 00007fd2147e3d5e RDI: 00000000ffffff9c [ 490.295334][ T30] RBP: 00007fd2147e3d5e R08: 0000000000000000 R09: 00007fd21543d6c0 [ 490.303351][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 490.311673][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 490.319773][ T30] [ 490.322821][ T30] INFO: task syz.0.893:7756 blocked for more than 145 seconds. [ 490.330452][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 490.349390][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.358159][ T30] task:syz.0.893 state:D stack:28096 pid:7756 tgid:7753 ppid:5097 flags:0x00000004 [ 490.368569][ T30] Call Trace: [ 490.371877][ T30] [ 490.374815][ T30] __schedule+0xf15/0x5d00 [ 490.379331][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 490.384588][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 490.389925][ T30] ? __pfx___schedule+0x10/0x10 [ 490.394821][ T30] ? schedule+0x298/0x350 [ 490.399290][ T30] ? __pfx_lock_release+0x10/0x10 [ 490.404373][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 490.409247][ T30] ? __mutex_trylock_common+0x78/0x250 [ 490.414778][ T30] schedule+0xe7/0x350 [ 490.419420][ T30] schedule_preempt_disabled+0x13/0x30 [ 490.425002][ T30] __mutex_lock+0x5b8/0x9c0 [ 490.429568][ T30] ? misc_open+0x59/0x4c0 [ 490.433966][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 490.439090][ T30] ? __pfx_misc_open+0x10/0x10 [ 490.443936][ T30] ? misc_open+0x59/0x4c0 [ 490.448508][ T30] misc_open+0x59/0x4c0 [ 490.452742][ T30] ? __pfx_misc_open+0x10/0x10 [ 490.457698][ T30] chrdev_open+0x26d/0x6f0 [ 490.462181][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 490.467255][ T30] ? security_file_open+0x9d/0x8b0 [ 490.472451][ T30] do_dentry_open+0x91f/0x15f0 [ 490.477326][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 490.482325][ T30] ? inode_permission+0xdd/0x5f0 [ 490.487477][ T30] vfs_open+0x82/0x3f0 [ 490.491593][ T30] ? may_open+0x1f2/0x400 [ 490.496136][ T30] path_openat+0x21fc/0x2e50 [ 490.500804][ T30] ? __pfx_path_openat+0x10/0x10 [ 490.505901][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 490.511182][ T30] ? find_held_lock+0x2d/0x110 [ 490.516064][ T30] do_filp_open+0x1dc/0x430 [ 490.520623][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 490.525842][ T30] ? find_held_lock+0x2d/0x110 [ 490.530660][ T30] ? _raw_spin_unlock+0x28/0x50 [ 490.535650][ T30] ? alloc_fd+0x2d7/0x6c0 [ 490.540033][ T30] do_sys_openat2+0x17a/0x1e0 [ 490.544728][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.550039][ T30] __x64_sys_openat+0x175/0x210 [ 490.555025][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.560463][ T30] do_syscall_64+0xcd/0x250 [ 490.565200][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.571162][ T30] RIP: 0033:0x7f044e575bd9 [ 490.575795][ T30] RSP: 002b:00007f044f3c2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.584254][ T30] RAX: ffffffffffffffda RBX: 00007f044e704110 RCX: 00007f044e575bd9 [ 490.592389][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 490.600582][ T30] RBP: 00007f044e5e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 490.608869][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.617403][ T30] R13: 000000000000006e R14: 00007f044e704110 R15: 00007ffd8d669fb8 [ 490.625554][ T30] [ 490.628714][ T30] [ 490.628714][ T30] Showing all locks held in the system: [ 490.636484][ T30] 3 locks held by kworker/1:0/25: [ 490.641600][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 490.652231][ T30] #1: ffffc900001f7d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 490.665258][ T30] #2: ffffffff8fbccb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 490.676892][ T30] 1 lock held by khungtaskd/30: [ 490.682267][ T30] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 490.692376][ T30] 5 locks held by kworker/1:1/45: [ 490.698434][ T30] #0: ffff88801b6f6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 490.710087][ T30] #1: ffffc90000b57d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 490.721709][ T30] #2: ffff888023ea6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 490.730750][ T30] #3: ffff888023ea7518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2802/0x4e20 [ 490.740820][ T30] #4: ffff888023cf0c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x282b/0x4e20 [ 490.750689][ T30] 2 locks held by getty/4840: [ 490.755443][ T30] #0: ffff88802eee90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 490.765408][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 490.775652][ T30] 1 lock held by syz-executor/5097: [ 490.780859][ T30] #0: ffffffff8fbccb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 490.791106][ T30] 2 locks held by syz.4.820/7552: [ 490.796249][ T30] #0: ffff88807ba93100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 490.806179][ T30] #1: ffffffff8fbccb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 490.816577][ T30] 2 locks held by syz.1.827/7580: [ 490.821649][ T30] #0: ffffffff8fbccb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x16e/0x570 [ 490.838110][ T30] #1: ffff88807ba93100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 [ 490.849042][ T30] 2 locks held by syz-executor/7733: [ 490.854371][ T30] #0: ffff88805274c118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bb/0x470 [ 490.864211][ T30] #1: ffffffff8fbccb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 490.874438][ T30] 2 locks held by syz.2.891/7741: [ 490.879657][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.888321][ T30] #1: ffffffff8fbccb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13b/0x750 [ 490.898484][ T30] 1 lock held by syz.3.892/7746: [ 490.903429][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.912024][ T30] 1 lock held by syz-executor/7747: [ 490.917339][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.925959][ T30] 1 lock held by syz.0.893/7756: [ 490.930933][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.939487][ T30] 1 lock held by syz-executor/7760: [ 490.944716][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.953343][ T30] 1 lock held by syz-executor/7761: [ 490.958677][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.967307][ T30] 1 lock held by syz-executor/7764: [ 490.972551][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.981174][ T30] 1 lock held by syz-executor/7766: [ 490.986450][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 490.995087][ T30] 1 lock held by syz-executor/7768: [ 491.000311][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.008956][ T30] 1 lock held by syz-executor/7770: [ 491.014189][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.022792][ T30] 1 lock held by syz-executor/7772: [ 491.028076][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.036729][ T30] 1 lock held by syz-executor/7774: [ 491.042022][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.050628][ T30] 1 lock held by syz-executor/7776: [ 491.055948][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.064499][ T30] 1 lock held by syz-executor/7778: [ 491.069903][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.078525][ T30] 1 lock held by syz-executor/7780: [ 491.083753][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.092372][ T30] 1 lock held by syz-executor/7782: [ 491.097650][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.106270][ T30] 1 lock held by syz-executor/7784: [ 491.111517][ T30] #0: ffffffff8e7d4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 491.120150][ T30] [ 491.122499][ T30] ============================================= [ 491.122499][ T30] [ 491.131030][ T30] NMI backtrace for cpu 1 [ 491.135400][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 491.145329][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 491.155395][ T30] Call Trace: [ 491.158683][ T30] [ 491.161619][ T30] dump_stack_lvl+0x116/0x1f0 [ 491.166320][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 491.171285][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 491.177288][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 491.183293][ T30] watchdog+0xf86/0x1240 [ 491.187570][ T30] ? __pfx_watchdog+0x10/0x10 [ 491.192297][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.197555][ T30] ? __kthread_parkme+0x148/0x220 [ 491.202636][ T30] ? __pfx_watchdog+0x10/0x10 [ 491.207370][ T30] kthread+0x2c1/0x3a0 [ 491.211457][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.216691][ T30] ? __pfx_kthread+0x10/0x10 [ 491.221299][ T30] ret_from_fork+0x45/0x80 [ 491.225742][ T30] ? __pfx_kthread+0x10/0x10 [ 491.230349][ T30] ret_from_fork_asm+0x1a/0x30 [ 491.235154][ T30] [ 491.239624][ T30] Sending NMI from CPU 1 to CPUs 0: [ 491.244882][ C0] NMI backtrace for cpu 0 [ 491.244909][ C0] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 491.244940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 491.244959][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 491.245001][ C0] RIP: 0010:_raw_spin_unlock_bh+0x5/0x30 [ 491.245033][ C0] Code: 9c 15 f6 5b c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <48> 8b 74 24 08 48 89 fb 48 8d 7f 18 e8 8a c8 80 f6 48 89 df e8 72 [ 491.245064][ C0] RSP: 0018:ffffc90000117c20 EFLAGS: 00000293 [ 491.245086][ C0] RAX: ffff888070124410 RBX: 0000000000000001 RCX: ffffffff816c46cd [ 491.245107][ C0] RDX: ffff8880172f5a00 RSI: ffffffff8aadf030 RDI: ffff88802cdc4d20 [ 491.245128][ C0] RBP: ffff88802cdc4d20 R08: 0000000000000001 R09: fffff52000022f78 [ 491.245148][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffff88807d777400 [ 491.245167][ C0] R13: ffff888070125c00 R14: ffff888021a66800 R15: ffff888070124400 [ 491.245189][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 491.245219][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.245240][ C0] CR2: 0000561684d97078 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 491.245260][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.245279][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 491.245298][ C0] Call Trace: [ 491.245306][ C0] [ 491.245314][ C0] ? show_regs+0x8c/0xa0 [ 491.245352][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 491.245390][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 491.245425][ C0] ? nmi_handle+0x1a9/0x5c0 [ 491.245463][ C0] ? _raw_spin_unlock_bh+0x5/0x30 [ 491.245489][ C0] ? default_do_nmi+0x6a/0x160 [ 491.245517][ C0] ? exc_nmi+0x170/0x1e0 [ 491.245540][ C0] ? end_repeat_nmi+0xf/0x53 [ 491.245565][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 491.245609][ C0] ? batadv_forw_packet_steal+0x100/0x180 [ 491.245646][ C0] ? _raw_spin_unlock_bh+0x5/0x30 [ 491.245673][ C0] ? _raw_spin_unlock_bh+0x5/0x30 [ 491.245699][ C0] ? _raw_spin_unlock_bh+0x5/0x30 [ 491.245726][ C0] [ 491.245734][ C0] [ 491.245741][ C0] batadv_forw_packet_steal+0x115/0x180 [ 491.245780][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x22f/0x8d0 [ 491.245818][ C0] process_one_work+0x9c5/0x1b40 [ 491.245847][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 491.245873][ C0] ? __pfx_process_one_work+0x10/0x10 [ 491.245901][ C0] ? assign_work+0x1a0/0x250 [ 491.245942][ C0] worker_thread+0x6c8/0xf30 [ 491.245972][ C0] ? __pfx_worker_thread+0x10/0x10 [ 491.245997][ C0] kthread+0x2c1/0x3a0 [ 491.246028][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.246054][ C0] ? __pfx_kthread+0x10/0x10 [ 491.246085][ C0] ret_from_fork+0x45/0x80 [ 491.246123][ C0] ? __pfx_kthread+0x10/0x10 [ 491.246154][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.246196][ C0] [ 491.247243][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 491.247269][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 491.247307][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 491.247329][ T30] Call Trace: [ 491.247341][ T30] [ 491.247353][ T30] dump_stack_lvl+0x3d/0x1f0 [ 491.247398][ T30] panic+0x6f5/0x7a0 [ 491.247449][ T30] ? __pfx_panic+0x10/0x10 [ 491.247499][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 491.247536][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 491.247584][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 491.247621][ T30] ? watchdog+0xd3d/0x1240 [ 491.247657][ T30] ? watchdog+0xd30/0x1240 [ 491.247693][ T30] watchdog+0xd4e/0x1240 [ 491.247732][ T30] ? __pfx_watchdog+0x10/0x10 [ 491.247767][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.247812][ T30] ? __kthread_parkme+0x148/0x220 [ 491.247858][ T30] ? __pfx_watchdog+0x10/0x10 [ 491.247893][ T30] kthread+0x2c1/0x3a0 [ 491.247934][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.247970][ T30] ? __pfx_kthread+0x10/0x10 [ 491.248014][ T30] ret_from_fork+0x45/0x80 [ 491.248063][ T30] ? __pfx_kthread+0x10/0x10 [ 491.248106][ T30] ret_from_fork_asm+0x1a/0x30 [ 491.248163][ T30] [ 491.250850][ T30] Kernel Offset: disabled [ 491.667462][ T30] Rebooting in 86400 seconds..