last executing test programs: 18.876083858s ago: executing program 0 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syslog(0x4, &(0x7f00000001c0)=""/72, 0x48) syslog(0x3, &(0x7f0000000500)=""/218, 0xda) 16.316018229s ago: executing program 0 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="92", 0x1}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) 12.82306092s ago: executing program 0 (id=241): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 11.440490182s ago: executing program 4 (id=244): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xaf}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x78}}, 0x4000010) 10.407818808s ago: executing program 1 (id=247): clock_getres(0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sndctrl(0x0, 0x1, 0x0) mount(&(0x7f00000006c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x204000, 0x0) 9.16162758s ago: executing program 2 (id=249): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) userfaultfd(0x80001) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 8.998623695s ago: executing program 1 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 8.621135891s ago: executing program 4 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsopen(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 8.608242602s ago: executing program 3 (id=252): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) gettid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.428669431s ago: executing program 1 (id=253): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r3, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) 6.927492808s ago: executing program 4 (id=254): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) splice(r2, 0x0, r3, 0x0, 0x9aa7, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xdc, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf0}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x5, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6bdcf0af}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2ee}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x240088c0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mkdir(&(0x7f0000001140)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 6.896963256s ago: executing program 2 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 6.6300387s ago: executing program 0 (id=256): r0 = syz_io_uring_setup(0x90e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x1, 0x10000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f97", 0x2}], 0x1}}], 0x1, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="1a010300000000f8", @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.555104534s ago: executing program 2 (id=257): r0 = socket(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00') socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fd}, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) 5.397686213s ago: executing program 3 (id=258): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 4.36554715s ago: executing program 3 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 4.258553415s ago: executing program 1 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) chmod(0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) add_key(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0xfffffffa, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000380), 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4.135967534s ago: executing program 1 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getpriority(0x2, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.135053573s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f00000012c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001700)=""/257, 0x101}, {0x0}, {0x0}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000080)=""/114, 0x72}], 0x5}}], 0x2, 0x40000000, 0x0) 2.236352644s ago: executing program 3 (id=263): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) ioperm(0x0, 0x444, 0xb1f) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) io_setup(0x3f, &(0x7f0000000140)=0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0]) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000000)=0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x45, &(0x7f0000000380)={0x5, 0xf, 0x45, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xf00f, 0x5, [0x0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b30c79332c9e9818f18e7b9c695b48d1"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x2, 0x1ff}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x801}}]}) semget(0x0, 0x4, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000", 0x17}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/120], 0x78) 2.234711316s ago: executing program 4 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x26d89, 0x100, 0x0, 0x235}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) 2.156017889s ago: executing program 1 (id=265): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000300)='0\x00', 0x2) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 875.861406ms ago: executing program 32 (id=265): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000300)='0\x00', 0x2) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 858.724214ms ago: executing program 0 (id=267): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 857.741482ms ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 775.364954ms ago: executing program 2 (id=269): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xf) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 450.943674ms ago: executing program 2 (id=270): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49", 0xa9}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)="2227a019d5e7f8e7f37b8483f12eb9716ddff30653c2fcc91a7b93d9032615e616b9cce3b11b24eaacf7cd5730342f767c2264cea4847dd424cf02e86f062c640259dca922a664d47b586c99e65c4f1ef29c5911746568639e844f7ab079f91b7e24d3cf0f21", 0x66}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 449.519309ms ago: executing program 3 (id=271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80410040}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 137.510532ms ago: executing program 0 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x3d6d, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_complete(r5) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) 65.807857ms ago: executing program 4 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) io_uring_setup(0x3e75, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x3, 0x614, 0x1, 0x5, 0x7, 0x9}, 0x9c) 0s ago: executing program 3 (id=274): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 51.619669][ T29] audit: type=1400 audit(1734502483.887:88): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.624116][ T5809] cgroup: Unknown subsys name 'net' [ 51.642422][ T29] audit: type=1400 audit(1734502483.897:89): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.669835][ T29] audit: type=1400 audit(1734502483.917:90): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.853632][ T5809] cgroup: Unknown subsys name 'cpuset' [ 51.860821][ T5809] cgroup: Unknown subsys name 'rlimit' [ 51.996527][ T29] audit: type=1400 audit(1734502484.267:91): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.020054][ T29] audit: type=1400 audit(1734502484.267:92): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.059546][ T29] audit: type=1400 audit(1734502484.267:93): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.080822][ T29] audit: type=1400 audit(1734502484.267:94): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.101538][ T29] audit: type=1400 audit(1734502484.267:95): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 52.104668][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.126500][ T29] audit: type=1400 audit(1734502484.267:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 52.158325][ T29] audit: type=1400 audit(1734502484.297:97): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.029768][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.024272][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.066310][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.074331][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.082388][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.091535][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.099028][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.106926][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.113881][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.114627][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.129292][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.136439][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.136838][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.147872][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.159418][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.166460][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.166473][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.181080][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.182049][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.195997][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.196882][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.210107][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.212091][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.224648][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.224822][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.235628][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.246251][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.247216][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.261537][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.263341][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.278970][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.582374][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 55.638075][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 55.720193][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.727788][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.737100][ T5819] bridge_slave_0: entered allmulticast mode [ 55.744287][ T5819] bridge_slave_0: entered promiscuous mode [ 55.756231][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.763403][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.770471][ T5819] bridge_slave_1: entered allmulticast mode [ 55.777165][ T5819] bridge_slave_1: entered promiscuous mode [ 55.793981][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 55.859917][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.892911][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.908965][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 55.934192][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.942917][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.949993][ T5820] bridge_slave_0: entered allmulticast mode [ 55.956699][ T5820] bridge_slave_0: entered promiscuous mode [ 55.967519][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.974666][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.982579][ T5820] bridge_slave_1: entered allmulticast mode [ 55.988962][ T5820] bridge_slave_1: entered promiscuous mode [ 55.997625][ T5819] team0: Port device team_slave_0 added [ 56.005296][ T5819] team0: Port device team_slave_1 added [ 56.072033][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.079130][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.086753][ T5821] bridge_slave_0: entered allmulticast mode [ 56.093328][ T5821] bridge_slave_0: entered promiscuous mode [ 56.131803][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.138895][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.146508][ T5821] bridge_slave_1: entered allmulticast mode [ 56.153091][ T5821] bridge_slave_1: entered promiscuous mode [ 56.166840][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.176617][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.185619][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.211631][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.223090][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 56.253976][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.269084][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.276854][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.302932][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.318769][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.346751][ T5820] team0: Port device team_slave_0 added [ 56.356456][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.372633][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.379780][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.387489][ T5822] bridge_slave_0: entered allmulticast mode [ 56.394058][ T5822] bridge_slave_0: entered promiscuous mode [ 56.404925][ T5820] team0: Port device team_slave_1 added [ 56.423609][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.430734][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.438064][ T5822] bridge_slave_1: entered allmulticast mode [ 56.444742][ T5822] bridge_slave_1: entered promiscuous mode [ 56.474578][ T5821] team0: Port device team_slave_0 added [ 56.484096][ T5819] hsr_slave_0: entered promiscuous mode [ 56.490371][ T5819] hsr_slave_1: entered promiscuous mode [ 56.521550][ T5821] team0: Port device team_slave_1 added [ 56.535595][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.542876][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.569165][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.582685][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.589624][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.615714][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.663337][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.674590][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.708136][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.715264][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.741269][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.753589][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.760537][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.786473][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.838071][ T5820] hsr_slave_0: entered promiscuous mode [ 56.844250][ T5820] hsr_slave_1: entered promiscuous mode [ 56.850135][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.858159][ T5820] Cannot create hsr debugfs directory [ 56.864158][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.871447][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.878568][ T5826] bridge_slave_0: entered allmulticast mode [ 56.885292][ T5826] bridge_slave_0: entered promiscuous mode [ 56.892928][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.899974][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.907201][ T5826] bridge_slave_1: entered allmulticast mode [ 56.913883][ T5826] bridge_slave_1: entered promiscuous mode [ 56.939990][ T5822] team0: Port device team_slave_0 added [ 56.952051][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.963290][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.976194][ T5822] team0: Port device team_slave_1 added [ 57.023836][ T5826] team0: Port device team_slave_0 added [ 57.034258][ T5821] hsr_slave_0: entered promiscuous mode [ 57.040302][ T5821] hsr_slave_1: entered promiscuous mode [ 57.046456][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.054641][ T5821] Cannot create hsr debugfs directory [ 57.077770][ T5826] team0: Port device team_slave_1 added [ 57.096551][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.103632][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.129742][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.164538][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.171794][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.197812][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.209139][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.216794][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.242970][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.269308][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.276371][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.303813][ T53] Bluetooth: hci0: command tx timeout [ 57.304194][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.320048][ T53] Bluetooth: hci4: command tx timeout [ 57.361130][ T5824] Bluetooth: hci3: command tx timeout [ 57.361258][ T5827] Bluetooth: hci2: command tx timeout [ 57.366795][ T53] Bluetooth: hci1: command tx timeout [ 57.399823][ T5822] hsr_slave_0: entered promiscuous mode [ 57.406912][ T5822] hsr_slave_1: entered promiscuous mode [ 57.413199][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.420737][ T5822] Cannot create hsr debugfs directory [ 57.545682][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.557469][ T5826] hsr_slave_0: entered promiscuous mode [ 57.564197][ T5826] hsr_slave_1: entered promiscuous mode [ 57.570222][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.577889][ T5826] Cannot create hsr debugfs directory [ 57.593246][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.619861][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.638286][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.660675][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.672054][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.695234][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.704887][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.781401][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.812016][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.823796][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.853624][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.871644][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.880358][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.903472][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.913207][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.993694][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.004815][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.014194][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.024333][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.067077][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.086275][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.126755][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.138539][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.158054][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.169237][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.176545][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.186756][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.193865][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.225420][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.237016][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.244090][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.255344][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.262455][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.295849][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.303000][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.345415][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.352495][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.397760][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.450477][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.470097][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 58.470115][ T29] audit: type=1400 audit(1734502490.737:111): avc: denied { sys_module } for pid=5819 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.489312][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.524669][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.534770][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.562172][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.569285][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.614401][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.621536][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.690558][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.709938][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.733856][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.740969][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.810496][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.817604][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.857544][ T5819] veth0_vlan: entered promiscuous mode [ 58.904503][ T5819] veth1_vlan: entered promiscuous mode [ 58.918169][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.937366][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.984496][ T5819] veth0_macvtap: entered promiscuous mode [ 59.036316][ T5819] veth1_macvtap: entered promiscuous mode [ 59.058047][ T5821] veth0_vlan: entered promiscuous mode [ 59.083183][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.098339][ T5821] veth1_vlan: entered promiscuous mode [ 59.129344][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.148884][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.163366][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.173316][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.182965][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.191983][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.225859][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.249576][ T5821] veth0_macvtap: entered promiscuous mode [ 59.277301][ T5821] veth1_macvtap: entered promiscuous mode [ 59.299266][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.314579][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.328772][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.347555][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.358439][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.369135][ T53] Bluetooth: hci4: command tx timeout [ 59.371806][ T5827] Bluetooth: hci0: command tx timeout [ 59.375758][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.421856][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.430548][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.440674][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.449582][ T5827] Bluetooth: hci1: command tx timeout [ 59.449616][ T5827] Bluetooth: hci3: command tx timeout [ 59.455527][ T53] Bluetooth: hci2: command tx timeout [ 59.467500][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.477761][ T5822] veth0_vlan: entered promiscuous mode [ 59.504178][ T5822] veth1_vlan: entered promiscuous mode [ 59.552887][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.560810][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.578777][ T5820] veth0_vlan: entered promiscuous mode [ 59.609441][ T5822] veth0_macvtap: entered promiscuous mode [ 59.634254][ T5826] veth0_vlan: entered promiscuous mode [ 59.640457][ T5822] veth1_macvtap: entered promiscuous mode [ 59.664049][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.678933][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.678993][ T5820] veth1_vlan: entered promiscuous mode [ 59.705779][ T5826] veth1_vlan: entered promiscuous mode [ 59.712165][ T29] audit: type=1400 audit(1734502491.977:112): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.VLfyjo/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.728977][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.737853][ T29] audit: type=1400 audit(1734502491.977:113): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.782141][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.794018][ T29] audit: type=1400 audit(1734502491.977:114): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.VLfyjo/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.819548][ T29] audit: type=1400 audit(1734502491.977:115): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.842563][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.852759][ T29] audit: type=1400 audit(1734502491.987:116): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.VLfyjo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.879711][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.879749][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.879765][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.880616][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.905510][ T29] audit: type=1400 audit(1734502491.987:117): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.VLfyjo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.948661][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.949729][ T29] audit: type=1400 audit(1734502491.987:118): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.979730][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.984811][ T29] audit: type=1400 audit(1734502492.017:119): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.013421][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.017880][ T29] audit: type=1400 audit(1734502492.017:120): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="gadgetfs" ino=7109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.023964][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.058010][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.066319][ T5820] veth0_macvtap: entered promiscuous mode [ 60.067560][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.074689][ T5820] veth1_macvtap: entered promiscuous mode [ 60.101950][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.112452][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.122363][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.132824][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.142657][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.153137][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.164139][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.188743][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.200371][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.210400][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.221695][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.231563][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.242608][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.253764][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.264510][ T5826] veth0_macvtap: entered promiscuous mode [ 60.274256][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.274371][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.283174][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.299711][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.308492][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.317675][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.331991][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.359314][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.374159][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.383797][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.441971][ T5826] veth1_macvtap: entered promiscuous mode [ 60.547721][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.581321][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.591298][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.603697][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.617224][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.627670][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.637948][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.649540][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.101724][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.170325][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.275231][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.286485][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.297174][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.309444][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.320687][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.330571][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.341254][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.351945][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.441546][ T5824] Bluetooth: hci0: command tx timeout [ 61.441563][ T53] Bluetooth: hci4: command tx timeout [ 61.469279][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.490908][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.499631][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.521603][ T53] Bluetooth: hci3: command tx timeout [ 61.525501][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.527018][ T53] Bluetooth: hci2: command tx timeout [ 61.560438][ T5824] Bluetooth: hci1: command tx timeout [ 61.817511][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.829620][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.393189][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.401162][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.408985][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.420941][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.494674][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 63.494688][ T29] audit: type=1400 audit(1734502495.767:139): avc: denied { read } for pid=5917 comm="syz.0.8" path="socket:[8291]" dev="sockfs" ino=8291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.516408][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.535269][ T53] Bluetooth: hci4: command tx timeout [ 63.535726][ T5824] Bluetooth: hci0: command tx timeout [ 63.546906][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.560206][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.564932][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.595032][ T29] audit: type=1400 audit(1734502495.867:140): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.fNlvXj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.657904][ T29] audit: type=1400 audit(1734502495.897:141): avc: denied { read } for pid=5920 comm="syz.1.9" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.700364][ T5924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.901114][ T29] audit: type=1400 audit(1734502495.897:142): avc: denied { open } for pid=5920 comm="syz.1.9" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.940359][ T5824] Bluetooth: hci3: command tx timeout [ 63.946321][ T5824] Bluetooth: hci2: command tx timeout [ 63.955112][ T5824] Bluetooth: hci1: command tx timeout [ 64.238845][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.257097][ T29] audit: type=1400 audit(1734502495.967:143): avc: denied { create } for pid=5920 comm="syz.1.9" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.311498][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.672171][ T5931] netlink: 'syz.4.5': attribute type 27 has an invalid length. [ 65.704097][ T29] audit: type=1400 audit(1734502497.347:144): avc: denied { create } for pid=5925 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.740997][ T29] audit: type=1400 audit(1734502497.507:145): avc: denied { bind } for pid=5925 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.760062][ T29] audit: type=1400 audit(1734502497.507:146): avc: denied { accept } for pid=5925 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.779596][ T29] audit: type=1400 audit(1734502497.507:147): avc: denied { read } for pid=5925 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.800950][ T29] audit: type=1400 audit(1734502497.937:148): avc: denied { create } for pid=5930 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.099114][ T5931] bond0: (slave bond_slave_0): Releasing backup interface [ 67.264094][ T5944] netlink: 'syz.0.13': attribute type 11 has an invalid length. [ 67.739779][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14'. [ 68.795659][ T5965] netlink: 'syz.4.16': attribute type 2 has an invalid length. [ 71.145729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.155434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.200366][ T5959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.200463][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 71.200504][ T29] audit: type=1400 audit(1734502503.467:156): avc: denied { create } for pid=5955 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.286485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.455278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 71.491152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.524596][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.552040][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.588677][ T29] audit: type=1400 audit(1734502503.857:157): avc: denied { read } for pid=5980 comm="syz.0.20" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.700969][ T29] audit: type=1400 audit(1734502503.857:158): avc: denied { open } for pid=5980 comm="syz.0.20" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.778887][ T29] audit: type=1400 audit(1734502503.857:159): avc: denied { write } for pid=5980 comm="syz.0.20" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.852932][ T29] audit: type=1400 audit(1734502503.857:160): avc: denied { ioctl } for pid=5980 comm="syz.0.20" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.631059][ T29] audit: type=1400 audit(1734502504.497:161): avc: denied { create } for pid=5984 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.757210][ T29] audit: type=1400 audit(1734502504.497:162): avc: denied { write } for pid=5984 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.777100][ T29] audit: type=1400 audit(1734502504.497:163): avc: denied { nlmsg_write } for pid=5984 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.687657][ T29] audit: type=1400 audit(1734502505.957:164): avc: denied { read } for pid=5997 comm="syz.3.24" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.753770][ T5996] netlink: 96 bytes leftover after parsing attributes in process `syz.4.23'. [ 73.792657][ T29] audit: type=1400 audit(1734502506.007:165): avc: denied { open } for pid=5997 comm="syz.3.24" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.963287][ T6004] veth0_vlan: entered allmulticast mode [ 74.728691][ T6005] veth0_vlan: left promiscuous mode [ 74.746440][ T6005] veth0_vlan: entered promiscuous mode [ 74.930999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.121280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.853024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.072099][ T1210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.250981][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 76.279760][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.469869][ T9] cfg80211: failed to load regulatory.db [ 76.490903][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.500662][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 76.530930][ T1210] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 76.539986][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.940237][ T1210] usb 2-1: config 0 descriptor?? [ 80.213141][ T1210] usbhid 2-1:0.0: can't add hid device: -71 [ 80.219320][ T1210] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 80.227525][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 80.227540][ T29] audit: type=1400 audit(1734502511.847:177): avc: denied { create } for pid=6045 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.293227][ T29] audit: type=1400 audit(1734502511.857:178): avc: denied { ioctl } for pid=6045 comm="syz.4.37" path="socket:[7869]" dev="sockfs" ino=7869 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.353369][ T1210] usb 2-1: USB disconnect, device number 2 [ 80.621491][ T6053] syz.1.39 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.429058][ T29] audit: type=1400 audit(1734502512.977:179): avc: denied { setopt } for pid=6054 comm="syz.2.38" lport=182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.728151][ T29] audit: type=1400 audit(1734502512.977:180): avc: denied { connect } for pid=6054 comm="syz.2.38" lport=182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.748640][ T29] audit: type=1400 audit(1734502512.987:181): avc: denied { write } for pid=6054 comm="syz.2.38" laddr=fe80::a8aa:aaff:feaa:aaaa lport=182 faddr=::1 fport=224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.791269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.801489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.165340][ T29] audit: type=1400 audit(1734502514.417:182): avc: denied { create } for pid=6065 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.693477][ T29] audit: type=1400 audit(1734502514.427:183): avc: denied { connect } for pid=6065 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.794627][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 82.809197][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 82.849568][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 82.871557][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 82.890027][ T29] audit: type=1400 audit(1734502515.147:184): avc: denied { ioctl } for pid=6071 comm="syz.4.44" path="socket:[8739]" dev="sockfs" ino=8739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.939510][ T29] audit: type=1400 audit(1734502516.187:185): avc: denied { create } for pid=6081 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.967514][ T29] audit: type=1400 audit(1734502516.187:186): avc: denied { setopt } for pid=6081 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.224647][ T6090] Zero length message leads to an empty skb [ 84.424063][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 84.434715][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 85.430421][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 85.504007][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 85.557406][ T6101] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 85.574186][ T6101] nbd: error processing sock list [ 85.879522][ T6113] ======================================================= [ 85.879522][ T6113] WARNING: The mand mount option has been deprecated and [ 85.879522][ T6113] and is ignored by this kernel. Remove the mand [ 85.879522][ T6113] option from the mount to silence this warning. [ 85.879522][ T6113] ======================================================= [ 85.975910][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 85.975944][ T29] audit: type=1400 audit(1734502518.137:194): avc: denied { mount } for pid=6102 comm="syz.0.53" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.303899][ T29] audit: type=1400 audit(1734502518.147:195): avc: denied { remount } for pid=6102 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.470825][ T29] audit: type=1400 audit(1734502518.727:196): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.780018][ T6117] x_tables: duplicate underflow at hook 1 [ 86.838268][ T868] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.750296][ T29] audit: type=1400 audit(1734502519.927:197): avc: denied { read write } for pid=6120 comm="syz.4.58" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.776116][ T29] audit: type=1400 audit(1734502519.937:198): avc: denied { open } for pid=6120 comm="syz.4.58" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.299672][ T6131] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 88.380959][ T29] audit: type=1400 audit(1734502520.647:199): avc: denied { create } for pid=6130 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.400966][ T29] audit: type=1400 audit(1734502520.657:200): avc: denied { ioctl } for pid=6130 comm="syz.0.59" path="socket:[8136]" dev="sockfs" ino=8136 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.438249][ T868] usb 2-1: device not accepting address 3, error -71 [ 88.451800][ T29] audit: type=1400 audit(1734502520.717:201): avc: denied { mount } for pid=6132 comm="syz.2.60" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.625742][ T29] audit: type=1400 audit(1734502520.897:202): avc: denied { create } for pid=6142 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.694143][ T29] audit: type=1400 audit(1734502520.927:203): avc: denied { setopt } for pid=6142 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.750995][ T1210] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 89.296375][ T1210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.481618][ T1210] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 89.492465][ T1210] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x3 is Bulk; changing to Interrupt [ 89.502826][ T1210] usb 4-1: config 1 interface 0 altsetting 210 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.516189][ T1210] usb 4-1: config 1 interface 0 has no altsetting 0 [ 89.529080][ T1210] usb 4-1: string descriptor 0 read error: -22 [ 89.541007][ T1210] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.550064][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.597413][ T6138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.604972][ T6138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.614866][ T1210] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 89.656001][ T6152] ISOFS: Unable to identify CD-ROM format. [ 90.657451][ T5979] usb 4-1: USB disconnect, device number 2 [ 91.608941][ T6164] sp0: Synchronizing with TNC [ 91.639210][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 91.639226][ T29] audit: type=1400 audit(1734502523.907:215): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.862830][ T29] audit: type=1400 audit(1734502523.907:216): avc: denied { read } for pid=5491 comm="dhcpcd" name="n100" dev="tmpfs" ino=2059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.884646][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.949507][ T29] audit: type=1400 audit(1734502523.907:217): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.972442][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.023650][ T6163] xt_socket: unknown flags 0x50 [ 92.040006][ T29] audit: type=1400 audit(1734502523.907:218): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.715191][ T29] audit: type=1400 audit(1734502524.987:219): avc: denied { cmd } for pid=6174 comm="syz.0.73" path="socket:[8872]" dev="sockfs" ino=8872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.737638][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.764640][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.794342][ T6184] ipvlan2: entered promiscuous mode [ 94.424928][ T29] audit: type=1400 audit(1734502526.127:220): avc: denied { connect } for pid=6182 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.453391][ T6184] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.471307][ T6184] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.014145][ T29] audit: type=1400 audit(1734502527.287:221): avc: denied { read write } for pid=6190 comm="syz.1.78" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.691005][ T29] audit: type=1400 audit(1734502527.287:222): avc: denied { open } for pid=6190 comm="syz.1.78" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.845030][ T29] audit: type=1804 audit(1734502528.117:223): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.78" name="/newroot/14/file1" dev="fuse" ino=1 res=1 errno=0 [ 95.871644][ T29] audit: type=1804 audit(1734502528.127:224): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.78" name="/newroot/14/file1" dev="fuse" ino=1 res=1 errno=0 [ 96.206142][ T6203] kvm: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 96.226656][ T6203] kvm: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 96.275557][ T6203] kvm: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 96.323793][ T6203] kvm: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 96.337986][ T6203] kvm: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 96.359361][ T6203] kvm: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 96.390215][ T6203] kvm_intel: kvm [6202]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 96.692837][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 96.692854][ T29] audit: type=1400 audit(1734502528.957:229): avc: denied { read } for pid=6219 comm="syz.2.85" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 96.753494][ T29] audit: type=1400 audit(1734502528.957:230): avc: denied { open } for pid=6219 comm="syz.2.85" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.042515][ T29] audit: type=1400 audit(1734502530.317:231): avc: denied { ioctl } for pid=6223 comm="syz.3.87" path="socket:[8971]" dev="sockfs" ino=8971 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.068145][ T6226] : renamed from bond0 (while UP) [ 99.351297][ T868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.360957][ T29] audit: type=1400 audit(1734502531.607:232): avc: denied { append } for pid=6236 comm="syz.2.90" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.376275][ T6237] loop6: detected capacity change from 0 to 524287999 [ 99.390714][ T29] audit: type=1400 audit(1734502531.637:233): avc: denied { append } for pid=6236 comm="syz.2.90" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.521082][ T868] usb 5-1: Using ep0 maxpacket: 8 [ 99.541159][ T868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.550478][ T868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.575079][ T868] usb 5-1: Product: syz [ 99.579267][ T868] usb 5-1: Manufacturer: syz [ 99.596988][ T868] usb 5-1: SerialNumber: syz [ 99.665317][ T29] audit: type=1400 audit(1734502531.937:234): avc: denied { create } for pid=6236 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 99.668670][ T868] usb 5-1: config 0 descriptor?? [ 100.548415][ T29] audit: type=1400 audit(1734502531.967:235): avc: denied { wake_alarm } for pid=6236 comm="syz.2.90" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.576240][ T29] audit: type=1400 audit(1734502532.297:236): avc: denied { bind } for pid=6242 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.983318][ T868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.431057][ T117] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.470454][ T29] audit: type=1400 audit(1734502533.737:237): avc: denied { accept } for pid=6252 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.569672][ T29] audit: type=1400 audit(1734502533.837:238): avc: denied { write } for pid=6252 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.642511][ T117] usb 1-1: Using ep0 maxpacket: 16 [ 101.661043][ T117] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 101.681791][ T117] usb 1-1: config 0 has no interface number 0 [ 101.712324][ T117] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 101.726767][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.744851][ T117] usb 1-1: Product: syz [ 101.746388][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 101.746400][ T29] audit: type=1400 audit(1734502534.017:240): avc: denied { create } for pid=6257 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.754530][ T117] usb 1-1: Manufacturer: syz [ 101.765029][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.798034][ T6261] bond_slave_0: entered promiscuous mode [ 101.804019][ T6261] bond_slave_1: entered promiscuous mode [ 101.811539][ T29] audit: type=1400 audit(1734502534.057:241): avc: denied { create } for pid=6260 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.831013][ T117] usb 1-1: SerialNumber: syz [ 101.838625][ T6261] macvtap1: entered promiscuous mode [ 101.850314][ T117] usb 1-1: config 0 descriptor?? [ 101.857995][ T6261] : entered promiscuous mode [ 101.910738][ T6261] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.925534][ T6261] : left promiscuous mode [ 101.930747][ T6261] bond_slave_0: left promiscuous mode [ 101.936307][ T6261] bond_slave_1: left promiscuous mode [ 102.314387][ T29] audit: type=1400 audit(1734502534.587:242): avc: denied { setopt } for pid=6257 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.382157][ T117] usb 1-1: USB disconnect, device number 2 [ 102.582746][ T868] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 102.624168][ T868] usb 5-1: USB disconnect, device number 2 [ 103.393169][ T6278] netlink: 'syz.1.102': attribute type 8 has an invalid length. [ 103.430966][ T6278] netlink: 224 bytes leftover after parsing attributes in process `syz.1.102'. [ 104.170932][ T29] audit: type=1400 audit(1734502536.327:243): avc: denied { create } for pid=6274 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.136279][ T6270] syz.3.100 (6270): drop_caches: 2 [ 106.211780][ T29] audit: type=1400 audit(1734502538.487:244): avc: denied { create } for pid=6298 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 106.636353][ T6306] kvm: emulating exchange as write [ 107.265614][ T6311] sp0: Synchronizing with TNC [ 107.571818][ T6309] xt_socket: unknown flags 0x50 [ 111.401555][ T6344] syzkaller0: entered allmulticast mode [ 113.617813][ T29] audit: type=1400 audit(1734502545.837:245): avc: denied { read } for pid=6353 comm="syz.4.124" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.849858][ T29] audit: type=1400 audit(1734502545.837:246): avc: denied { open } for pid=6353 comm="syz.4.124" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.106124][ T29] audit: type=1400 audit(1734502547.377:247): avc: denied { write } for pid=6366 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.537643][ T29] audit: type=1400 audit(1734502550.767:248): avc: denied { read } for pid=6390 comm="syz.0.133" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.871069][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.229720][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.270794][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.333695][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.414622][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.443927][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.456499][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.467747][ T9] usb 4-1: Manufacturer: syz [ 120.562069][ T9] usb 4-1: config 0 descriptor?? [ 120.600288][ T6417] 9pnet_fd: Insufficient options for proto=fd [ 120.606673][ T29] audit: type=1400 audit(1734502552.867:249): avc: denied { mounton } for pid=6416 comm="syz.0.141" path="/28/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 121.126165][ T9] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 121.177648][ T9] appleir 0003:05AC:8243.0001: parse failed [ 121.218972][ T9] appleir 0003:05AC:8243.0001: probe with driver appleir failed with error -22 [ 121.339909][ T29] audit: type=1400 audit(1734502553.567:250): avc: denied { connect } for pid=6408 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.387385][ T9] usb 4-1: USB disconnect, device number 3 [ 122.829259][ T29] audit: type=1400 audit(1734502554.497:251): avc: denied { sqpoll } for pid=6425 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.028650][ T29] audit: type=1400 audit(1734502555.297:252): avc: denied { unlink } for pid=6437 comm="syz.0.147" name="#1" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.097311][ T29] audit: type=1400 audit(1734502555.337:253): avc: denied { mount } for pid=6437 comm="syz.0.147" name="/" dev="overlay" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.771240][ T29] audit: type=1326 audit(1734502555.347:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.4.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b26785d29 code=0x0 [ 124.151098][ T1210] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.331067][ T1210] usb 1-1: Using ep0 maxpacket: 16 [ 124.345971][ T1210] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 124.359564][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.402055][ T1210] usb 1-1: config 0 descriptor?? [ 124.465600][ T1210] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 125.075542][ T29] audit: type=1400 audit(1734502557.317:255): avc: denied { read } for pid=6454 comm="syz.4.151" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 125.148435][ T29] audit: type=1400 audit(1734502557.317:256): avc: denied { open } for pid=6454 comm="syz.4.151" path="/34/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 125.205669][ T29] audit: type=1400 audit(1734502557.327:257): avc: denied { ioctl } for pid=6454 comm="syz.4.151" path="/34/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 126.471590][ T1210] gspca_sonixj: i2c_w8 err -71 [ 126.491059][ T1210] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 126.506151][ T1210] usb 1-1: USB disconnect, device number 3 [ 126.872864][ T29] audit: type=1400 audit(1734502559.147:258): avc: denied { getopt } for pid=6469 comm="syz.2.154" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.039585][ T6470] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 127.110252][ T29] audit: type=1400 audit(1734502559.377:259): avc: denied { ioctl } for pid=6469 comm="syz.2.154" path="socket:[9854]" dev="sockfs" ino=9854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.035989][ T29] audit: type=1400 audit(1734502560.307:260): avc: denied { read } for pid=6475 comm="syz.3.157" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.221093][ T29] audit: type=1400 audit(1734502560.307:261): avc: denied { open } for pid=6475 comm="syz.3.157" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.246114][ T29] audit: type=1400 audit(1734502560.367:262): avc: denied { ioctl } for pid=6475 comm="syz.3.157" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.383355][ T6487] hub 2-0:1.0: USB hub found [ 128.389884][ T6487] hub 2-0:1.0: 1 port detected [ 128.821018][ T29] audit: type=1400 audit(1734502560.627:263): avc: denied { write } for pid=6484 comm="syz.2.159" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.433645][ T29] audit: type=1400 audit(1734502561.477:264): avc: denied { setopt } for pid=6492 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.299294][ T29] audit: type=1400 audit(1734502562.567:265): avc: denied { ioctl } for pid=6502 comm="syz.3.164" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10503 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.388574][ T29] audit: type=1400 audit(1734502562.637:266): avc: denied { create } for pid=6490 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.541121][ T29] audit: type=1400 audit(1734502562.637:267): avc: denied { getopt } for pid=6490 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.912462][ T1141] Bluetooth: hci5: Frame reassembly failed (-84) [ 132.219233][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 132.219271][ T29] audit: type=1400 audit(1734502564.487:269): avc: denied { bind } for pid=6517 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.727023][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733494][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.765052][ T29] audit: type=1400 audit(1734502565.037:270): avc: denied { connect } for pid=6527 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 133.564855][ T29] audit: type=1400 audit(1734502565.037:271): avc: denied { name_connect } for pid=6527 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 133.931130][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.931226][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 134.660508][ T6543] kvm: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 134.684849][ T6543] kvm: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 134.694279][ T6543] kvm: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 134.703587][ T29] audit: type=1400 audit(1734502566.957:272): avc: denied { setopt } for pid=6552 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.750393][ T6554] hsr0: entered promiscuous mode [ 134.761053][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.764178][ T6543] kvm: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 134.768763][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.783508][ T6543] kvm: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 134.800227][ T6543] kvm: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 134.812571][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.826509][ T6543] kvm_intel: kvm [6542]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 134.827766][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.535414][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 136.876162][ T6562] hsr_slave_1 (unregistering): left promiscuous mode [ 137.067667][ T29] audit: type=1400 audit(1734502569.337:273): avc: denied { name_bind } for pid=6575 comm="syz.0.186" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 138.344146][ T29] audit: type=1400 audit(1734502570.617:274): avc: denied { shutdown } for pid=6584 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.454656][ T29] audit: type=1400 audit(1734502570.727:275): avc: denied { name_connect } for pid=6584 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 138.487615][ T6580] kvm: MWAIT instruction emulated as NOP! [ 138.919145][ T29] audit: type=1400 audit(1734502571.187:276): avc: denied { create } for pid=6601 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.008257][ T29] audit: type=1400 audit(1734502571.237:277): avc: denied { connect } for pid=6601 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.587125][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.196'. [ 141.690715][ T29] audit: type=1400 audit(1734502573.927:278): avc: denied { create } for pid=6625 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.501024][ T29] audit: type=1400 audit(1734502573.927:279): avc: denied { bind } for pid=6625 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.584879][ T6658] syz.3.204: attempt to access beyond end of device [ 146.584879][ T6658] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 151.339466][ T29] audit: type=1400 audit(1734502583.607:280): avc: denied { read write } for pid=6741 comm="syz.2.215" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.549599][ T29] audit: type=1400 audit(1734502583.607:281): avc: denied { open } for pid=6741 comm="syz.2.215" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 153.721540][ T6769] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 153.853284][ T29] audit: type=1400 audit(1734502586.117:282): avc: denied { setcurrent } for pid=6764 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 154.046228][ T868] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 154.136379][ T6777] block nbd1: shutting down sockets [ 154.568170][ T29] audit: type=1400 audit(1734502586.817:283): avc: denied { write } for pid=6772 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.203489][ T868] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 155.212939][ T868] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8 [ 155.224037][ T868] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 155.233101][ T868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.245804][ T6763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.608708][ T868] usb 1-1: string descriptor 0 read error: -71 [ 155.613193][ T29] audit: type=1400 audit(1734502587.377:284): avc: denied { read } for pid=6772 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.677823][ T29] audit: type=1400 audit(1734502587.877:285): avc: denied { create } for pid=6785 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.706907][ T868] usb 1-1: USB disconnect, device number 4 [ 155.942416][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.972954][ T6790] binder: 6789:6790 ioctl c0306201 0 returned -14 [ 155.973189][ T29] audit: type=1400 audit(1734502588.247:286): avc: denied { ioctl } for pid=6789 comm="syz.1.225" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 158.003580][ T29] audit: type=1400 audit(1734502590.007:287): avc: denied { mount } for pid=6803 comm="syz.3.230" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.342286][ T29] audit: type=1400 audit(1734502590.617:288): avc: denied { ioctl } for pid=6809 comm="syz.4.231" path="socket:[11035]" dev="sockfs" ino=11035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.855852][ T6816] netlink: 'syz.1.228': attribute type 12 has an invalid length. [ 161.721951][ T29] audit: type=1400 audit(1734502593.707:289): avc: denied { mount } for pid=6825 comm="syz.1.235" name="/" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 162.090960][ T29] audit: type=1400 audit(1734502593.707:290): avc: denied { read } for pid=6825 comm="syz.1.235" name="/" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.255327][ T6840] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 162.747612][ T29] audit: type=1400 audit(1734502593.707:291): avc: denied { open } for pid=6825 comm="syz.1.235" path="/43/file0" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.775635][ T29] audit: type=1400 audit(1734502593.707:292): avc: denied { unmount } for pid=6825 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 162.796091][ T29] audit: type=1400 audit(1734502594.517:293): avc: denied { bind } for pid=6829 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.815579][ T29] audit: type=1400 audit(1734502594.527:294): avc: denied { write } for pid=6829 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.432894][ T29] audit: type=1400 audit(1734502595.437:295): avc: denied { read } for pid=6842 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.456361][ T29] audit: type=1400 audit(1734502595.437:296): avc: denied { open } for pid=6842 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.493426][ T29] audit: type=1400 audit(1734502595.437:297): avc: denied { getattr } for pid=6842 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.361067][ T29] audit: type=1400 audit(1734502596.627:298): avc: denied { open } for pid=6849 comm="syz.0.241" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.694046][ T29] audit: type=1400 audit(1734502596.847:299): avc: denied { ioctl } for pid=6849 comm="syz.0.241" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 165.625325][ T29] audit: type=1400 audit(1734502597.657:300): avc: denied { bind } for pid=6860 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.645003][ T29] audit: type=1326 audit(1734502597.657:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe976585d29 code=0x7ffc0000 [ 165.791069][ T29] audit: type=1326 audit(1734502597.657:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe976585d29 code=0x7ffc0000 [ 166.207442][ T29] audit: type=1326 audit(1734502597.657:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe976585d29 code=0x7ffc0000 [ 166.343885][ T29] audit: type=1326 audit(1734502597.677:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9765b85e5 code=0x7ffc0000 [ 166.375824][ T6861] Bluetooth: MGMT ver 1.23 [ 166.577289][ T6880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'. [ 166.586730][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'. [ 166.596031][ T6880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'. [ 166.641465][ T6880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'. [ 167.348164][ T6891] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 167.358193][ T6891] cramfs: wrong magic [ 168.440911][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 168.440928][ T29] audit: type=1400 audit(1734502600.707:352): avc: denied { search } for pid=5491 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=11073 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 168.481710][ T53] Bluetooth: hci0: command tx timeout [ 170.102684][ T6908] syz.4.251 (6908): drop_caches: 2 [ 170.109818][ T6908] syz.4.251 (6908): drop_caches: 2 [ 170.471427][ T29] audit: type=1400 audit(1734502602.737:353): avc: denied { read } for pid=6909 comm="syz.4.254" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.689370][ T29] audit: type=1400 audit(1734502602.737:354): avc: denied { ioctl } for pid=6909 comm="syz.4.254" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.701036][ T8] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 171.427500][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 171.562051][ T8] usb 5-1: device descriptor read/64, error -32 [ 171.801479][ T8] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 171.940945][ T8] usb 5-1: device descriptor read/64, error -71 [ 171.960994][ T117] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.051277][ T8] usb usb5-port1: attempt power cycle [ 172.126459][ T117] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 172.198346][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.240817][ T117] usb 1-1: Product: syz [ 172.257611][ T117] usb 1-1: Manufacturer: syz [ 172.347333][ T117] usb 1-1: SerialNumber: syz [ 172.396669][ T117] usb 1-1: config 0 descriptor?? [ 172.521269][ T8] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 172.581035][ T8] usb 5-1: device descriptor read/8, error -71 [ 172.841081][ T8] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 172.859466][ T117] usb 1-1: Firmware: major: 0, minor: 248, hardware type: UNKNOWN (6) [ 172.902320][ T29] audit: type=1400 audit(1734502605.167:355): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.930986][ T8] usb 5-1: device descriptor read/8, error -71 [ 173.049031][ T8] usb usb5-port1: unable to enumerate USB device [ 174.016634][ T117] usb 1-1: failed to fetch extended address, random address set [ 174.024571][ T117] usb 1-1: atusb_probe: initialization failed, error = -524 [ 174.032356][ T117] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 174.047901][ T117] usb 1-1: USB disconnect, device number 5 [ 174.502465][ T29] audit: type=1400 audit(1734502605.397:356): avc: denied { connect } for pid=6962 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.632734][ T29] audit: type=1400 audit(1734502606.727:357): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.655034][ T29] audit: type=1400 audit(1734502606.727:358): avc: denied { unlink } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.836592][ T29] audit: type=1400 audit(1734502606.837:359): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.290424][ T1167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.379877][ T29] audit: type=1400 audit(1734502608.637:360): avc: denied { write } for pid=6988 comm="syz.0.267" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.499738][ T29] audit: type=1400 audit(1734502608.637:361): avc: denied { open } for pid=6988 comm="syz.0.267" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.508442][ T1167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.537155][ T6999] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.626878][ T6990] kvm: pic: non byte read [ 176.638881][ T6990] kvm: pic: level sensitive irq not supported [ 176.640232][ T6990] kvm: pic: non byte read [ 176.779236][ T1167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.799907][ T6989] kvm: kvm [6987]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 176.809553][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.271'. [ 176.829747][ T6989] kvm: kvm [6987]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 176.843691][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 176.883179][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.271'. [ 176.895949][ T1167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.911076][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.271'. [ 177.057910][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.070651][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.080930][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.090611][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.105641][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.114160][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.172263][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 177.185058][ C1] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 177.193471][ C1] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.272 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 177.204047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 177.214090][ C1] RIP: 0010:put_page+0x21/0x280 [ 177.219037][ C1] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 64 ed 97 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 177.238730][ C1] RSP: 0018:ffffc90000a18428 EFLAGS: 00010202 [ 177.244786][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8903a648 [ 177.252748][ C1] RDX: 0000000000000001 RSI: ffffffff890227ec RDI: 0000000000000008 [ 177.260706][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 177.268662][ C1] R10: 0000000000000000 R11: 0000000000000004 R12: ffff8880336be280 [ 177.276621][ C1] R13: ffff8880363ea240 R14: ffff8880363ea270 R15: 0000000000000007 [ 177.284580][ C1] FS: 00007f0fa51e56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 177.293502][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.300078][ C1] CR2: 0000000020022030 CR3: 000000005b66c000 CR4: 00000000003526f0 [ 177.308039][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.315996][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.323955][ C1] Call Trace: [ 177.327220][ C1] [ 177.330052][ C1] ? die_addr+0x3b/0xa0 [ 177.334213][ C1] ? exc_general_protection+0x155/0x230 [ 177.339761][ C1] ? asm_exc_general_protection+0x26/0x30 [ 177.345484][ C1] ? skb_release_data+0x4b8/0x730 [ 177.350499][ C1] ? put_page+0xc/0x280 [ 177.354649][ C1] ? put_page+0x21/0x280 [ 177.358887][ C1] ? put_page+0xc/0x280 [ 177.363035][ C1] skb_release_data+0x4d7/0x730 [ 177.367879][ C1] __kfree_skb+0x4f/0x70 [ 177.372111][ C1] tcp_ack+0x1eb7/0x5ba0 [ 177.376357][ C1] ? __pfx_tcp_ack+0x10/0x10 [ 177.380941][ C1] ? tcp_validate_incoming+0x662/0x1d00 [ 177.386504][ C1] ? read_tsc+0x9/0x20 [ 177.390583][ C1] tcp_rcv_state_process+0xdd4/0x4c40 [ 177.395959][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 177.401154][ C1] ? __pfx_lock_release+0x10/0x10 [ 177.406180][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 177.411388][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.417285][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 177.423092][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 177.428370][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.433998][ C1] ? rcu_is_watching+0x12/0xc0 [ 177.438768][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 177.443794][ C1] ? tcp_v4_do_rcv+0x1ad/0xa90 [ 177.448644][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 177.453232][ C1] tcp_v4_rcv+0x33a0/0x4380 [ 177.457744][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 177.462594][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 177.468055][ C1] ? rcu_is_watching+0x12/0xc0 [ 177.472816][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 177.477664][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 177.483029][ C1] ip_local_deliver_finish+0x316/0x570 [ 177.488484][ C1] ip_local_deliver+0x18e/0x1f0 [ 177.493325][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 177.498685][ C1] ip_rcv+0x2c3/0x5d0 [ 177.502659][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 177.507150][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 177.513143][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 177.519594][ C1] ? rcu_is_watching+0x12/0xc0 [ 177.524368][ C1] ? process_backlog+0x3f1/0x15f0 [ 177.529401][ C1] ? process_backlog+0x3f1/0x15f0 [ 177.534423][ C1] __netif_receive_skb+0x1d/0x160 [ 177.539453][ C1] process_backlog+0x443/0x15f0 [ 177.544308][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 177.549682][ C1] net_rx_action+0xa94/0x1010 [ 177.554360][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 177.559470][ C1] ? rcu_is_watching+0x12/0xc0 [ 177.564231][ C1] ? trace_rcu_utilization+0x106/0x170 [ 177.569680][ C1] ? rcu_core+0xada/0x14d0 [ 177.574097][ C1] ? mark_held_locks+0x9f/0xe0 [ 177.578856][ C1] handle_softirqs+0x213/0x8f0 [ 177.583620][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 177.588904][ C1] __irq_exit_rcu+0x109/0x170 [ 177.593573][ C1] irq_exit_rcu+0x9/0x30 [ 177.597809][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 177.603437][ C1] [ 177.606352][ C1] [ 177.609267][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.615245][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 177.621132][ C1] Code: b8 ff ff ff ff 65 0f c1 05 90 c2 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 177.640731][ C1] RSP: 0018:ffffc90003197bb8 EFLAGS: 00000206 [ 177.646792][ C1] RAX: 0000000000000046 RBX: 1ffff92000632f78 RCX: ffffffff8175d0de [ 177.654754][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1e920 [ 177.662716][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dca19f [ 177.670676][ C1] R10: ffffffff96e50cff R11: 0000000000000000 R12: 0000000000000000 [ 177.678637][ C1] R13: ffff8880620d81e0 R14: 0000000000000000 R15: 0000000000000000 [ 177.686606][ C1] ? hlock_class+0x4e/0x130 [ 177.691115][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.696744][ C1] ? rcu_is_watching+0x12/0xc0 [ 177.701512][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 177.706711][ C1] ? __might_fault+0xe3/0x190 [ 177.711387][ C1] ? lock_acquire+0x2f/0xb0 [ 177.715883][ C1] ? __might_fault+0xe3/0x190 [ 177.720556][ C1] ? __might_fault+0xe3/0x190 [ 177.725232][ C1] __might_fault+0x11b/0x190 [ 177.729820][ C1] ? __might_fault+0xe3/0x190 [ 177.734496][ C1] do_recvmmsg+0x321/0x740 [ 177.738905][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 177.743835][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 177.749114][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 177.754482][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 177.759761][ C1] ? __pfx_lock_release+0x10/0x10 [ 177.764782][ C1] __x64_sys_recvmmsg+0x239/0x290 [ 177.769801][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 177.775340][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 177.780622][ C1] do_syscall_64+0xcd/0x250 [ 177.785127][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.791023][ C1] RIP: 0033:0x7f0fa4385d29 [ 177.795441][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.815044][ C1] RSP: 002b:00007f0fa51e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.823448][ C1] RAX: ffffffffffffffda RBX: 00007f0fa4576080 RCX: 00007f0fa4385d29 [ 177.831408][ C1] RDX: 03fffffffffffeda RSI: 00000000200000c0 RDI: 0000000000000003 [ 177.839367][ C1] RBP: 00007f0fa4401a20 R08: 0000000000000000 R09: 0000000000000000 [ 177.847326][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 177.855291][ C1] R13: 0000000000000001 R14: 00007f0fa4576080 R15: 00007ffcc1901238 [ 177.863257][ C1] [ 177.866262][ C1] Modules linked in: [ 177.870224][ C1] ---[ end trace 0000000000000000 ]--- [ 177.875705][ C1] RIP: 0010:put_page+0x21/0x280 [ 177.880587][ C1] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 64 ed 97 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 177.900251][ C1] RSP: 0018:ffffc90000a18428 EFLAGS: 00010202 [ 177.906312][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8903a648 [ 177.914269][ C1] RDX: 0000000000000001 RSI: ffffffff890227ec RDI: 0000000000000008 [ 177.922243][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 177.930239][ C1] R10: 0000000000000000 R11: 0000000000000004 R12: ffff8880336be280 [ 177.938225][ C1] R13: ffff8880363ea240 R14: ffff8880363ea270 R15: 0000000000000007 [ 177.946188][ C1] FS: 00007f0fa51e56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 177.955108][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.961681][ C1] CR2: 0000000020022030 CR3: 000000005b66c000 CR4: 00000000003526f0 [ 177.969631][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.977611][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.985615][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 177.992988][ C1] Kernel Offset: disabled [ 177.997312][ C1] Rebooting in 86400 seconds..