last executing test programs: 10.329716227s ago: executing program 2 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d30826100000000", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24004801}, 0x10) 7.9974421s ago: executing program 0 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4, 0x9, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0xbcd}}, @sadb_sa={0x2, 0x1, 0x0, 0xb0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x70}}, 0x84) 7.313513681s ago: executing program 2 (id=134): r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0xf00, 0x0, 0x0) 5.90969536s ago: executing program 0 (id=137): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x9, 0x0, &(0x7f0000000840)="84573d80b81d7f9249", 0x0}, 0x50) 5.909472553s ago: executing program 2 (id=138): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.280105387s ago: executing program 0 (id=141): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000001280)=""/78, 0x4e}, {&(0x7f0000001300)=""/174, 0xae}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 5.279888328s ago: executing program 4 (id=142): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.227657401s ago: executing program 0 (id=143): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 4.633916704s ago: executing program 4 (id=145): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) 4.493935385s ago: executing program 0 (id=146): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffffe) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 4.425702243s ago: executing program 2 (id=147): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.330202459s ago: executing program 4 (id=148): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xb0002000}) 4.157690171s ago: executing program 1 (id=150): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x4, 0xfffffffffffffffe, &(0x7f0000000000)=0x44) 4.04723277s ago: executing program 4 (id=151): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) accept4(r3, 0x0, 0x0, 0x80000) 4.025955194s ago: executing program 1 (id=152): unshare(0x480) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$netrom(r0, 0x0, 0x0) 2.67756796s ago: executing program 4 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 2.639971189s ago: executing program 2 (id=154): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10, 0xb805}}], 0x30}, 0x0) 2.537669613s ago: executing program 1 (id=156): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) close_range(r0, 0xffffffffffffffff, 0x0) 2.377431316s ago: executing program 2 (id=158): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x25}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.219542585s ago: executing program 1 (id=161): syz_open_dev$sndpcmp(&(0x7f0000001440), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.154236962s ago: executing program 3 (id=162): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, 0x0}, 0x4000001) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/142, 0x8e}], 0x1, &(0x7f0000000680)=""/207, 0xcf}, 0xe0000000}], 0x1, 0x0, 0x0) 2.04340895s ago: executing program 3 (id=163): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x0, 0xb, 0x13ec, 0x1}, 0x31) 2.043093733s ago: executing program 1 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000100)=0x40, 0x4) 1.96093859s ago: executing program 3 (id=165): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0x0, 0x1fd}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 713.066091ms ago: executing program 1 (id=166): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0x304}, "8000", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) 708.09202ms ago: executing program 3 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x40880) 704.746726ms ago: executing program 0 (id=168): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x800, 0x20000008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb9b, 0x10, 0x3, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'sha224\x00'}}) 45.741765ms ago: executing program 3 (id=169): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 45.388799ms ago: executing program 4 (id=170): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000003800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=171): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004004}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4800) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 62.313687][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 62.313702][ T30] audit: type=1400 audit(1751816280.994:57): avc: denied { transition } for pid=5757 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.350071][ T30] audit: type=1400 audit(1751816280.994:58): avc: denied { noatsecure } for pid=5757 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.378968][ T30] audit: type=1400 audit(1751816281.024:59): avc: denied { write } for pid=5757 comm="sh" path="pipe:[4295]" dev="pipefs" ino=4295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 62.422575][ T30] audit: type=1400 audit(1751816281.024:60): avc: denied { rlimitinh } for pid=5757 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.466337][ T30] audit: type=1400 audit(1751816281.024:61): avc: denied { siginh } for pid=5757 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 72.074895][ T30] audit: type=1400 audit(1751816290.754:62): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.078698][ T5815] cgroup: Unknown subsys name 'net' [ 72.097675][ T30] audit: type=1400 audit(1751816290.754:63): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.125041][ T30] audit: type=1400 audit(1751816290.784:64): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.274803][ T5815] cgroup: Unknown subsys name 'cpuset' [ 72.282961][ T5815] cgroup: Unknown subsys name 'rlimit' [ 72.410615][ T30] audit: type=1400 audit(1751816291.084:65): avc: denied { setattr } for pid=5815 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.434092][ T30] audit: type=1400 audit(1751816291.084:66): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.454848][ T30] audit: type=1400 audit(1751816291.084:67): avc: denied { write } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.501851][ T30] audit: type=1400 audit(1751816291.084:68): avc: denied { read } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.522547][ T30] audit: type=1400 audit(1751816291.134:69): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 72.549441][ T30] audit: type=1400 audit(1751816291.134:70): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.570700][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.572957][ T30] audit: type=1400 audit(1751816291.164:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 73.548602][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.838540][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.851602][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.859318][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.867958][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.876133][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.893350][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.908250][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.912461][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.925831][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.934351][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.935302][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.942738][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.949805][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.955536][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.963615][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.971666][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.977451][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.992421][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.992862][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.000689][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.008336][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.015632][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.029886][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.044356][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.057046][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.468298][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 76.535575][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 76.635152][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 76.683963][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 76.726300][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.733949][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.741365][ T5825] bridge_slave_0: entered allmulticast mode [ 76.749309][ T5825] bridge_slave_0: entered promiscuous mode [ 76.785404][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 76.799652][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.807066][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.814445][ T5825] bridge_slave_1: entered allmulticast mode [ 76.821124][ T5825] bridge_slave_1: entered promiscuous mode [ 76.866972][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.874226][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.881537][ T5836] bridge_slave_0: entered allmulticast mode [ 76.888715][ T5836] bridge_slave_0: entered promiscuous mode [ 76.922597][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.929815][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.937392][ T5836] bridge_slave_1: entered allmulticast mode [ 76.944518][ T5836] bridge_slave_1: entered promiscuous mode [ 76.982997][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.016439][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.023612][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030740][ T5826] bridge_slave_0: entered allmulticast mode [ 77.037641][ T5826] bridge_slave_0: entered promiscuous mode [ 77.045962][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.054501][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.061617][ T5826] bridge_slave_1: entered allmulticast mode [ 77.068516][ T5826] bridge_slave_1: entered promiscuous mode [ 77.077125][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.104195][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.111329][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.118742][ T5833] bridge_slave_0: entered allmulticast mode [ 77.125846][ T5833] bridge_slave_0: entered promiscuous mode [ 77.134559][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.146494][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.186148][ T5825] team0: Port device team_slave_0 added [ 77.192833][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.200377][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.208127][ T5833] bridge_slave_1: entered allmulticast mode [ 77.215281][ T5833] bridge_slave_1: entered promiscuous mode [ 77.248718][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.259927][ T5825] team0: Port device team_slave_1 added [ 77.290750][ T5836] team0: Port device team_slave_0 added [ 77.308077][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.317890][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.326179][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.352568][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.373280][ T5836] team0: Port device team_slave_1 added [ 77.380956][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.391514][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.398770][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.406409][ T5831] bridge_slave_0: entered allmulticast mode [ 77.413410][ T5831] bridge_slave_0: entered promiscuous mode [ 77.445649][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.452735][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.478971][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.491887][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.510342][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.517899][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.525251][ T5831] bridge_slave_1: entered allmulticast mode [ 77.531971][ T5831] bridge_slave_1: entered promiscuous mode [ 77.540448][ T5826] team0: Port device team_slave_0 added [ 77.549032][ T5826] team0: Port device team_slave_1 added [ 77.618380][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.625464][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.651706][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.665481][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.685437][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.692620][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.718985][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.731978][ T5833] team0: Port device team_slave_0 added [ 77.739254][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.746279][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.772593][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.790131][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.809108][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.816350][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.842667][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.855260][ T5833] team0: Port device team_slave_1 added [ 77.886747][ T5825] hsr_slave_0: entered promiscuous mode [ 77.893145][ T5825] hsr_slave_1: entered promiscuous mode [ 77.924034][ T5831] team0: Port device team_slave_0 added [ 77.956354][ T5831] team0: Port device team_slave_1 added [ 77.965683][ T5826] hsr_slave_0: entered promiscuous mode [ 77.971712][ T5826] hsr_slave_1: entered promiscuous mode [ 77.978000][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.986348][ T5826] Cannot create hsr debugfs directory [ 78.004864][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.011820][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.038217][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.070992][ T5836] hsr_slave_0: entered promiscuous mode [ 78.077260][ T5846] Bluetooth: hci2: command tx timeout [ 78.077436][ T5846] Bluetooth: hci1: command tx timeout [ 78.082847][ T5832] Bluetooth: hci3: command tx timeout [ 78.088708][ T5846] Bluetooth: hci0: command tx timeout [ 78.093728][ T5830] Bluetooth: hci4: command tx timeout [ 78.100197][ T5836] hsr_slave_1: entered promiscuous mode [ 78.110974][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.119165][ T5836] Cannot create hsr debugfs directory [ 78.133395][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.140349][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.167734][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.179563][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.186728][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.212922][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.225142][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.232080][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.258029][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.376733][ T5833] hsr_slave_0: entered promiscuous mode [ 78.383690][ T5833] hsr_slave_1: entered promiscuous mode [ 78.389599][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.397916][ T5833] Cannot create hsr debugfs directory [ 78.440376][ T5831] hsr_slave_0: entered promiscuous mode [ 78.447766][ T5831] hsr_slave_1: entered promiscuous mode [ 78.454025][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.461569][ T5831] Cannot create hsr debugfs directory [ 78.728163][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.754512][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.771570][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.787245][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.826392][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.836967][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.857941][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.869336][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.926187][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.937946][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.949900][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.975587][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.069827][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.085203][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.111248][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.123246][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.139256][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.195814][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.206814][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.218398][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.237563][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.249435][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.262072][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.287769][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.295195][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.328376][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.340429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.347537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.387564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.394769][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.421316][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.449724][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.456892][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.510389][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.545057][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.552127][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.560977][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.568087][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.590682][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.602885][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.661264][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.671728][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 79.671742][ T30] audit: type=1400 audit(1751816298.354:86): avc: denied { sys_module } for pid=5826 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.743807][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.792038][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.824503][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.831659][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.875258][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.882438][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.896132][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.927861][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.953436][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.960597][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.998169][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.005303][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.077033][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.153495][ T5832] Bluetooth: hci0: command tx timeout [ 80.153548][ T5846] Bluetooth: hci3: command tx timeout [ 80.158916][ T5832] Bluetooth: hci1: command tx timeout [ 80.166049][ T5842] Bluetooth: hci2: command tx timeout [ 80.170404][ T5830] Bluetooth: hci4: command tx timeout [ 80.184805][ T5826] veth0_vlan: entered promiscuous mode [ 80.217997][ T5826] veth1_vlan: entered promiscuous mode [ 80.288520][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.327910][ T5825] veth0_vlan: entered promiscuous mode [ 80.376464][ T5825] veth1_vlan: entered promiscuous mode [ 80.388507][ T5826] veth0_macvtap: entered promiscuous mode [ 80.420913][ T5826] veth1_macvtap: entered promiscuous mode [ 80.446162][ T5836] veth0_vlan: entered promiscuous mode [ 80.484326][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.521294][ T5825] veth0_macvtap: entered promiscuous mode [ 80.537048][ T5836] veth1_vlan: entered promiscuous mode [ 80.557911][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.577098][ T5825] veth1_macvtap: entered promiscuous mode [ 80.590334][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.599991][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.609547][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.618452][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.654575][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.672057][ T5836] veth0_macvtap: entered promiscuous mode [ 80.689939][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.701055][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.723940][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.736727][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.747542][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.756585][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.776920][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.815657][ T5836] veth1_macvtap: entered promiscuous mode [ 80.871026][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.917276][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.961796][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.970957][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.998112][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.009326][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.018475][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.028385][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.039623][ T5833] veth0_vlan: entered promiscuous mode [ 81.086515][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.095334][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.121873][ T5833] veth1_vlan: entered promiscuous mode [ 81.147254][ T30] audit: type=1400 audit(1751816299.814:87): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.nNCd2q/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 81.171491][ T5831] veth0_vlan: entered promiscuous mode [ 81.177183][ T5831] veth1_vlan: entered promiscuous mode [ 81.195165][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.205099][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.216465][ T30] audit: type=1400 audit(1751816299.814:88): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.238763][ T30] audit: type=1400 audit(1751816299.824:89): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.nNCd2q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.265371][ T30] audit: type=1400 audit(1751816299.824:90): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.291756][ T30] audit: type=1400 audit(1751816299.824:91): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.nNCd2q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.327673][ T30] audit: type=1400 audit(1751816299.824:92): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.nNCd2q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.334646][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.360188][ T30] audit: type=1400 audit(1751816299.824:93): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.391634][ T30] audit: type=1400 audit(1751816299.884:94): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.414802][ T30] audit: type=1400 audit(1751816299.894:95): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="gadgetfs" ino=6579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.421320][ T5831] veth0_macvtap: entered promiscuous mode [ 81.458412][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.458655][ T5833] veth0_macvtap: entered promiscuous mode [ 81.476394][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.548382][ T5831] veth1_macvtap: entered promiscuous mode [ 81.578259][ T5833] veth1_macvtap: entered promiscuous mode [ 81.619646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.639356][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.654161][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.699036][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.720607][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.740915][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.763475][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.782958][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.849604][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.870699][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.242245][ T5832] Bluetooth: hci1: command tx timeout [ 82.248103][ T5830] Bluetooth: hci4: command tx timeout [ 82.248151][ T5842] Bluetooth: hci0: command tx timeout [ 82.253576][ T5830] Bluetooth: hci2: command tx timeout [ 82.258955][ T5846] Bluetooth: hci3: command tx timeout [ 82.289543][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.309190][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.324722][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.336205][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.414831][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.440930][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.650045][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.673388][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.775377][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.805515][ T5960] binder: 5959:5960 ioctl 5 200000000400 returned -22 [ 82.822659][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.846361][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.870843][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.941287][ T5962] FAULT_INJECTION: forcing a failure. [ 82.941287][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.957132][ T5960] input: syz1 as /devices/virtual/input/input5 [ 83.003304][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.0.8 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 83.003327][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.003339][ T5962] Call Trace: [ 83.003352][ T5962] [ 83.003364][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 83.003394][ T5962] should_fail_ex+0x512/0x640 [ 83.003423][ T5962] _copy_from_user+0x2e/0xd0 [ 83.003446][ T5962] vhost_vring_ioctl+0x353/0x13b0 [ 83.003471][ T5962] ? do_vfs_ioctl+0x523/0x1a60 [ 83.003489][ T5962] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 83.003515][ T5962] ? vhost_dev_ioctl+0x130/0xdc0 [ 83.003551][ T5962] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.003580][ T5962] vhost_vsock_dev_ioctl+0x8a9/0xb30 [ 83.003601][ T5962] ? hook_file_ioctl_common+0x145/0x410 [ 83.003616][ T5962] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 83.003642][ T5962] ? selinux_file_ioctl+0xb4/0x270 [ 83.003663][ T5962] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 83.003686][ T5962] __x64_sys_ioctl+0x18e/0x210 [ 83.003704][ T5962] do_syscall_64+0xcd/0x4c0 [ 83.003727][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.003742][ T5962] RIP: 0033:0x7f87f3d8e929 [ 83.003754][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.003767][ T5962] RSP: 002b:00007f87f4b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.003789][ T5962] RAX: ffffffffffffffda RBX: 00007f87f3fb5fa0 RCX: 00007f87f3d8e929 [ 83.003798][ T5962] RDX: 00002000000001c0 RSI: 000000004028af11 RDI: 0000000000000003 [ 83.003807][ T5962] RBP: 00007f87f4b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 83.003815][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.003823][ T5962] R13: 0000000000000000 R14: 00007f87f3fb5fa0 R15: 00007ffdfc745288 [ 83.003842][ T5962] [ 83.010559][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.277406][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.469074][ T5970] FAULT_INJECTION: forcing a failure. [ 83.469074][ T5970] name failslab, interval 1, probability 0, space 0, times 0 [ 83.500438][ T5970] CPU: 1 UID: 0 PID: 5970 Comm: syz.3.4 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 83.500466][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.500476][ T5970] Call Trace: [ 83.500482][ T5970] [ 83.500489][ T5970] dump_stack_lvl+0x16c/0x1f0 [ 83.500519][ T5970] should_fail_ex+0x512/0x640 [ 83.500543][ T5970] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 83.500568][ T5970] should_failslab+0xc2/0x120 [ 83.500594][ T5970] __kmalloc_cache_noprof+0x6a/0x3e0 [ 83.500615][ T5970] ? rcu_is_watching+0x12/0xc0 [ 83.500637][ T5970] ? device_add+0xccc/0x1a70 [ 83.500660][ T5970] device_add+0xccc/0x1a70 [ 83.500677][ T5970] ? uinput_ioctl_handler.isra.0+0xcb/0x1df0 [ 83.500697][ T5970] ? __pfx_device_add+0x10/0x10 [ 83.500712][ T5970] ? __pfx___mutex_lock+0x10/0x10 [ 83.500740][ T5970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.500767][ T5970] input_register_device+0x7e8/0x1130 [ 83.500801][ T5970] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 83.500819][ T5970] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 83.500847][ T5970] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 83.500874][ T5970] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.500916][ T5970] ? selinux_file_ioctl+0x180/0x270 [ 83.500938][ T5970] ? selinux_file_ioctl+0xb4/0x270 [ 83.500962][ T5970] ? __pfx_uinput_ioctl+0x10/0x10 [ 83.500983][ T5970] __x64_sys_ioctl+0x18e/0x210 [ 83.501006][ T5970] do_syscall_64+0xcd/0x4c0 [ 83.501033][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.501051][ T5970] RIP: 0033:0x7f4b5418e929 [ 83.501066][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.501081][ T5970] RSP: 002b:00007f4b550ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.501099][ T5970] RAX: ffffffffffffffda RBX: 00007f4b543b5fa0 RCX: 00007f4b5418e929 [ 83.501110][ T5970] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 83.501120][ T5970] RBP: 00007f4b550ab090 R08: 0000000000000000 R09: 0000000000000000 [ 83.501130][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.501140][ T5970] R13: 0000000000000000 R14: 00007f4b543b5fa0 R15: 00007ffefcc4bd08 [ 83.501163][ T5970] [ 83.897918][ T5980] kvm: pic: non byte write [ 84.210124][ T5986] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 84.313290][ T5846] Bluetooth: hci2: command tx timeout [ 84.313317][ T5832] Bluetooth: hci4: command tx timeout [ 84.325126][ T5830] Bluetooth: hci1: command tx timeout [ 84.325233][ T5838] Bluetooth: hci0: command tx timeout [ 84.331075][ T5830] Bluetooth: hci3: command tx timeout [ 85.105006][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 85.105023][ T30] audit: type=1400 audit(1751816303.784:150): avc: denied { name_bind } for pid=5997 comm="syz.4.16" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 85.313609][ T30] audit: type=1400 audit(1751816303.784:151): avc: denied { node_bind } for pid=5997 comm="syz.4.16" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.643979][ T30] audit: type=1400 audit(1751816304.024:152): avc: denied { create } for pid=5999 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.677668][ T30] audit: type=1400 audit(1751816304.024:153): avc: denied { shutdown } for pid=5999 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.701751][ T30] audit: type=1400 audit(1751816304.024:154): avc: denied { setopt } for pid=5999 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.721467][ T30] audit: type=1400 audit(1751816304.324:155): avc: denied { write } for pid=6004 comm="syz.1.18" name="cgroup.subtree_control" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.785825][ T30] audit: type=1400 audit(1751816304.324:156): avc: denied { open } for pid=6004 comm="syz.1.18" path="" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.808956][ T2147] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.239194][ T2147] usb 1-1: Using ep0 maxpacket: 32 [ 86.288128][ T2147] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 86.298134][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.322251][ T30] audit: type=1400 audit(1751816304.984:157): avc: denied { read write } for pid=6011 comm="syz.1.20" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.368444][ T2147] usb 1-1: Product: syz [ 86.392498][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 86.402381][ T2147] usb 1-1: Manufacturer: syz [ 86.407062][ T2147] usb 1-1: SerialNumber: syz [ 86.439106][ T2147] usb 1-1: config 0 descriptor?? [ 86.455609][ T30] audit: type=1400 audit(1751816304.984:158): avc: denied { open } for pid=6011 comm="syz.1.20" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.559389][ T30] audit: type=1400 audit(1751816305.024:159): avc: denied { read } for pid=6011 comm="syz.1.20" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.698647][ T6021] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 86.746865][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.755647][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.806054][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 86.824188][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.831447][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.839717][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.846989][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.895044][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 87.377850][ T6021] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 87.389548][ T6025] bridge_slave_1: left allmulticast mode [ 87.407812][ T6025] bridge_slave_1: left promiscuous mode [ 87.438263][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.462107][ T6025] bridge_slave_0: left allmulticast mode [ 87.480719][ T6025] bridge_slave_0: left promiscuous mode [ 87.501982][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.598369][ T10] cfg80211: failed to load regulatory.db [ 87.677864][ T6025] bond0: (slave bridge0): Releasing backup interface [ 87.923457][ T6037] overlay: Unknown parameter 'dont_hash' [ 88.055292][ T6038] cgroup: fork rejected by pids controller in /syz1 [ 88.239750][ T5958] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.394912][ T5958] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.420532][ T5958] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.434936][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.445138][ T5958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.468547][ T5958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.570497][ T5958] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.585669][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.596706][ T5958] usb 4-1: Product: syz [ 88.600909][ T5958] usb 4-1: Manufacturer: syz [ 88.620011][ T5958] cdc_wdm 4-1:1.0: skipping garbage [ 88.631072][ T5958] cdc_wdm 4-1:1.0: skipping garbage [ 88.804302][ T5958] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 88.810291][ T5958] cdc_wdm 4-1:1.0: Unknown control protocol [ 89.105836][ T6054] 9pnet: Found fid 0 not clunked [ 89.343455][ T6055] loop4: detected capacity change from 0 to 7 [ 89.385698][ T5831] Dev loop4: unable to read RDB block 7 [ 89.403389][ T2147] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 89.425349][ T5831] loop4: unable to read partition table [ 89.442730][ T5831] loop4: partition table beyond EOD, truncated [ 89.461751][ T6055] Dev loop4: unable to read RDB block 7 [ 89.472346][ T2147] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 89.532412][ T6055] loop4: unable to read partition table [ 89.538905][ T6055] loop4: partition table beyond EOD, truncated [ 89.553878][ T6055] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.589348][ T2147] usb 1-1: USB disconnect, device number 2 [ 89.726781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.754400][ T5202] Dev loop4: unable to read RDB block 7 [ 89.760047][ T5202] loop4: unable to read partition table [ 89.768853][ T5202] loop4: partition table beyond EOD, truncated [ 89.889119][ T5202] Dev loop4: unable to read RDB block 7 [ 89.917740][ T5202] loop4: unable to read partition table [ 89.944269][ T5202] loop4: partition table beyond EOD, truncated [ 89.970350][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.034033][ T5202] Dev loop4: unable to read RDB block 7 [ 90.039825][ T5202] loop4: unable to read partition table [ 90.095945][ T5202] loop4: partition table beyond EOD, truncated [ 90.273971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.282681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.291170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.299638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.309308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.318332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.421255][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 90.421275][ T30] audit: type=1400 audit(1751816309.074:189): avc: denied { map_read map_write } for pid=6068 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.538390][ T6067] Zero length message leads to an empty skb [ 90.581025][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.630390][ T5202] Dev loop4: unable to read RDB block 7 [ 90.636932][ T5202] loop4: unable to read partition table [ 90.659962][ T5202] loop4: partition table beyond EOD, truncated [ 90.675796][ T30] audit: type=1400 audit(1751816309.344:190): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.702382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.137109][ T2147] usb 4-1: USB disconnect, device number 2 [ 91.197773][ T6086] FAULT_INJECTION: forcing a failure. [ 91.197773][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.197804][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.3.42 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 91.197826][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.197835][ T6086] Call Trace: [ 91.197841][ T6086] [ 91.197848][ T6086] dump_stack_lvl+0x16c/0x1f0 [ 91.197878][ T6086] should_fail_ex+0x512/0x640 [ 91.197907][ T6086] _copy_from_user+0x2e/0xd0 [ 91.197944][ T6086] video_usercopy+0xedd/0x1720 [ 91.197969][ T6086] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.197988][ T6086] ? selinux_kernel_read_file+0xd0/0x130 [ 91.198013][ T6086] ? __pfx_video_usercopy+0x10/0x10 [ 91.198051][ T6086] v4l2_ioctl+0x1ba/0x250 [ 91.198072][ T6086] ? __pfx_v4l2_ioctl+0x10/0x10 [ 91.198095][ T6086] __x64_sys_ioctl+0x18e/0x210 [ 91.198119][ T6086] do_syscall_64+0xcd/0x4c0 [ 91.198146][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.198164][ T6086] RIP: 0033:0x7f4b5418e929 [ 91.198178][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.198194][ T6086] RSP: 002b:00007f4b550ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.198210][ T6086] RAX: ffffffffffffffda RBX: 00007f4b543b5fa0 RCX: 00007f4b5418e929 [ 91.198221][ T6086] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 91.198232][ T6086] RBP: 00007f4b550ab090 R08: 0000000000000000 R09: 0000000000000000 [ 91.198242][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.198251][ T6086] R13: 0000000000000000 R14: 00007f4b543b5fa0 R15: 00007ffefcc4bd08 [ 91.198275][ T6086] [ 91.359917][ T6087] trusted_key: encrypted_key: insufficient parameters specified [ 91.567946][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.576150][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.577224][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.578063][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.578882][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.579382][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.587102][ T30] audit: type=1400 audit(1751816310.254:191): avc: denied { ioctl } for pid=6090 comm="syz-executor" path="socket:[8337]" dev="sockfs" ino=8337 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.606012][ T30] audit: type=1400 audit(1751816310.284:192): avc: denied { mounton } for pid=6090 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 91.679055][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.042385][ T2147] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.293739][ T30] audit: type=1400 audit(1751816310.844:193): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.325270][ T2147] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.344265][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.358064][ T30] audit: type=1400 audit(1751816310.844:194): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.381980][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.414714][ T2147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.432476][ T30] audit: type=1400 audit(1751816310.844:195): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.465344][ T2147] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.475788][ T13] bridge_slave_1: left allmulticast mode [ 92.496798][ T13] bridge_slave_1: left promiscuous mode [ 92.507553][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.527515][ T30] audit: type=1400 audit(1751816310.844:196): avc: denied { read } for pid=5497 comm="dhcpcd" name="n101" dev="tmpfs" ino=2130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.528460][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.555237][ T2147] usb 3-1: config 0 descriptor?? [ 92.590231][ T6093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.605534][ T30] audit: type=1400 audit(1751816310.844:197): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.664031][ T30] audit: type=1400 audit(1751816310.844:198): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.734070][ T13] bridge_slave_0: left allmulticast mode [ 92.743548][ T13] bridge_slave_0: left promiscuous mode [ 92.749534][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.962787][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.188296][ T2147] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 93.216316][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 93.226817][ T2147] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 93.248335][ T5885] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.266894][ T5885] usb 4-1: config 0 has no interface number 0 [ 93.283207][ T5885] usb 4-1: config 0 interface 184 has no altsetting 0 [ 93.304263][ T5885] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.322850][ T5885] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 93.341851][ T5885] usb 4-1: Product: syz [ 93.346486][ T5885] usb 4-1: Manufacturer: syz [ 93.351099][ T5885] usb 4-1: SerialNumber: syz [ 93.470386][ T5885] usb 4-1: config 0 descriptor?? [ 93.493802][ T5885] smsc75xx v1.0.0 [ 93.602744][ T5842] Bluetooth: hci4: command tx timeout [ 93.720707][ T6126] input: syz1 as /devices/virtual/input/input8 [ 93.916743][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.017363][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.032251][ T5885] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 94.048115][ T5885] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.051315][ T13] bond0 (unregistering): Released all slaves [ 94.060591][ T5885] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 94.091322][ T5885] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 94.091362][ T5885] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 94.093998][ T5885] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 94.096423][ T5885] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 94.438034][ T9] usb 3-1: USB disconnect, device number 2 [ 94.540224][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 94.564940][ T6133] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 94.580460][ T6133] batman_adv: batadv0: Adding interface: team0 [ 94.586722][ T6133] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.611964][ T6133] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 94.928445][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.51'. [ 94.937309][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.51'. [ 95.294566][ T6152] comedi comedi0: board detection failed [ 95.322638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.330975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.418440][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.452825][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.491717][ T6090] bridge_slave_0: entered allmulticast mode [ 95.499039][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 95.499054][ T30] audit: type=1400 audit(1751816314.174:222): avc: denied { ioctl } for pid=6144 comm="syz.0.51" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.500886][ T6090] bridge_slave_0: entered promiscuous mode [ 95.656594][ T6161] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.032335][ T5842] Bluetooth: hci4: command tx timeout [ 96.083468][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.091543][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.106553][ T43] usb 4-1: USB disconnect, device number 3 [ 96.115864][ T6090] bridge_slave_1: entered allmulticast mode [ 96.138907][ T6090] bridge_slave_1: entered promiscuous mode [ 96.255499][ T30] audit: type=1400 audit(1751816314.934:223): avc: denied { cmd } for pid=6159 comm="syz.4.54" path="socket:[8061]" dev="sockfs" ino=8061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.890692][ T6181] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 96.929677][ T13] hsr_slave_0: left promiscuous mode [ 96.952439][ T13] hsr_slave_1: left promiscuous mode [ 96.969475][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.978927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.993292][ T6183] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 96.993741][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.034189][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.077820][ T13] veth1_macvtap: left promiscuous mode [ 97.092922][ T13] veth0_macvtap: left promiscuous mode [ 97.099796][ T13] veth1_vlan: left promiscuous mode [ 97.109735][ T13] veth0_vlan: left promiscuous mode [ 97.212990][ T5892] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.373144][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 97.391231][ T5892] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 97.411776][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.436924][ T5892] usb 1-1: Product: syz [ 97.441335][ T5892] usb 1-1: Manufacturer: syz [ 97.448830][ T5892] usb 1-1: SerialNumber: syz [ 97.462455][ T5892] r8152-cfgselector 1-1: Unknown version 0x0000 [ 97.471095][ T5892] r8152-cfgselector 1-1: config 0 descriptor?? [ 97.917164][ T5958] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 98.074755][ T5830] Bluetooth: hci4: command tx timeout [ 98.507507][ T30] audit: type=1400 audit(1751816317.184:224): avc: denied { read append } for pid=6194 comm="syz.2.61" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.531203][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.541643][ T13] team0 (unregistering): Port device team_slave_1 removed [ 98.544066][ T6195] mmap: syz.2.61 (6195) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.567294][ T30] audit: type=1400 audit(1751816317.214:225): avc: denied { open } for pid=6194 comm="syz.2.61" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.599017][ T30] audit: type=1400 audit(1751816317.214:226): avc: denied { map } for pid=6194 comm="syz.2.61" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.626655][ T30] audit: type=1400 audit(1751816317.214:227): avc: denied { write } for pid=6194 comm="syz.2.61" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.650025][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.684376][ T13] team0 (unregistering): Port device team_slave_0 removed [ 98.772148][ T30] audit: type=1400 audit(1751816317.434:228): avc: denied { create } for pid=6196 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.883442][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.891857][ T30] audit: type=1400 audit(1751816317.484:229): avc: denied { connect } for pid=6196 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.954406][ T30] audit: type=1400 audit(1751816317.514:230): avc: denied { write } for pid=6196 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.975958][ T30] audit: type=1400 audit(1751816317.644:231): avc: denied { read } for pid=6196 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.097063][ T5899] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.192294][ T5899] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.234261][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.256608][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 99.276411][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 99.289396][ T5899] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.298669][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.342343][ T5899] usb 3-1: Product: syz [ 99.352695][ T5899] usb 3-1: Manufacturer: syz [ 99.375774][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 99.387222][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 99.406238][ T5899] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 99.422434][ T5899] cdc_wdm 3-1:1.0: Unknown control protocol [ 99.755605][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.794891][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.967278][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 100.153053][ T5830] Bluetooth: hci4: command tx timeout [ 100.601807][ T6090] team0: Port device team_slave_0 added [ 100.642328][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 100.642358][ T30] audit: type=1400 audit(1751816318.954:236): avc: denied { append } for pid=6202 comm="syz.4.64" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.893873][ T6090] team0: Port device team_slave_1 added [ 101.042546][ T30] audit: type=1400 audit(1751816318.954:237): avc: denied { ioctl } for pid=6202 comm="syz.4.64" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 101.095589][ T6203] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 101.482464][ T6203] CIFS: Unable to determine destination address [ 101.548624][ T6215] FAULT_INJECTION: forcing a failure. [ 101.548624][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.561836][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.4.65 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 101.561852][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.561859][ T6215] Call Trace: [ 101.561863][ T6215] [ 101.561867][ T6215] dump_stack_lvl+0x16c/0x1f0 [ 101.561890][ T6215] should_fail_ex+0x512/0x640 [ 101.561908][ T6215] _copy_from_user+0x2e/0xd0 [ 101.561925][ T6215] memdup_user+0x6b/0xe0 [ 101.561942][ T6215] strndup_user+0x78/0xe0 [ 101.561969][ T6215] keyctl_keyring_search+0x126/0x440 [ 101.561984][ T6215] ? __pfx_keyctl_keyring_search+0x10/0x10 [ 101.561998][ T6215] ? ksys_write+0x1ac/0x250 [ 101.562013][ T6215] ? __pfx_ksys_write+0x10/0x10 [ 101.562029][ T6215] __do_sys_keyctl+0xac/0x590 [ 101.562043][ T6215] do_syscall_64+0xcd/0x4c0 [ 101.562061][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.562073][ T6215] RIP: 0033:0x7f26d038e929 [ 101.562088][ T6215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.562098][ T6215] RSP: 002b:00007f26d11e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 101.562110][ T6215] RAX: ffffffffffffffda RBX: 00007f26d05b6080 RCX: 00007f26d038e929 [ 101.562116][ T6215] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 000000000000000a [ 101.562123][ T6215] RBP: 00007f26d11e3090 R08: fffffffffffffffc R09: 0000000000000000 [ 101.562129][ T6215] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 101.562135][ T6215] R13: 0000000000000000 R14: 00007f26d05b6080 R15: 00007ffe5b290458 [ 101.562147][ T6215] [ 101.902464][ T30] audit: type=1400 audit(1751816320.584:238): avc: denied { execute } for pid=6220 comm="syz.3.66" path="/11/cpu.stat" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.962847][ T6221] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 101.997555][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.026262][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.026622][ T6221] audit: out of memory in audit_log_start [ 102.059458][ T30] audit: type=1400 audit(1751816320.604:239): avc: denied { create } for pid=6220 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.136109][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.175333][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.183203][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.209401][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.395236][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 102.415933][ T6225] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 102.484094][ T6225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.497149][ T30] audit: type=1400 audit(1751816321.164:240): avc: denied { write } for pid=6223 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.530325][ T6231] ALSA: seq fatal error: cannot create timer (-16) [ 102.581649][ T6090] hsr_slave_0: entered promiscuous mode [ 102.591488][ T30] audit: type=1400 audit(1751816321.264:241): avc: denied { ioctl } for pid=6223 comm="syz.0.67" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.632962][ T6090] hsr_slave_1: entered promiscuous mode [ 102.639318][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.672625][ T6090] Cannot create hsr debugfs directory [ 102.712126][ T9] usb 3-1: USB disconnect, device number 3 [ 102.961984][ T30] audit: type=1400 audit(1751816321.634:242): avc: denied { map } for pid=6244 comm="syz.3.72" path="socket:[8713]" dev="sockfs" ino=8713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.043097][ T30] audit: type=1400 audit(1751816321.664:243): avc: denied { read } for pid=6244 comm="syz.3.72" path="socket:[8713]" dev="sockfs" ino=8713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.212501][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.373057][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 103.426605][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.453913][ T5885] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 103.492542][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.506749][ T5885] usb 5-1: config 0 descriptor?? [ 104.699805][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 104.714401][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.817234][ T5885] usb 5-1: USB disconnect, device number 2 [ 105.000572][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 105.387132][ T6090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.410067][ T6090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.430079][ T6090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.451265][ T6090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.885027][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.452136][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.706452][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.713653][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.804357][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.811579][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.890654][ T6090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.916645][ T6090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.980967][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 106.980982][ T30] audit: type=1400 audit(1751816325.654:247): avc: denied { watch } for pid=6308 comm="syz.0.84" path="/17/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.012667][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.137435][ T30] audit: type=1400 audit(1751816325.654:248): avc: denied { watch_sb } for pid=6308 comm="syz.0.84" path="/17/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.160691][ T30] audit: type=1400 audit(1751816325.734:249): avc: denied { sys_module } for pid=6090 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.212522][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 107.778642][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.797921][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 107.812237][ T9] usb 3-1: can't read configurations, error -71 [ 107.848109][ T6308] [U] Ú [ 107.859238][ T30] audit: type=1400 audit(1751816326.454:250): avc: denied { write } for pid=6298 comm="syz.2.79" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 107.967060][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 108.297273][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.434137][ T6090] veth0_vlan: entered promiscuous mode [ 108.455596][ T30] audit: type=1400 audit(1751816327.124:251): avc: denied { create } for pid=6340 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.507861][ T6090] veth1_vlan: entered promiscuous mode [ 108.556999][ T30] audit: type=1400 audit(1751816327.124:252): avc: denied { ioctl } for pid=6340 comm="syz.2.89" path="socket:[9045]" dev="sockfs" ino=9045 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.610987][ T6090] veth0_macvtap: entered promiscuous mode [ 108.631759][ T30] audit: type=1400 audit(1751816327.164:253): avc: denied { write } for pid=6340 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 108.666787][ T6090] veth1_macvtap: entered promiscuous mode [ 108.706058][ T30] audit: type=1400 audit(1751816327.174:254): avc: denied { read } for pid=6340 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 108.755883][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.797482][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.077644][ T6090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.120707][ T6090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.150769][ T30] audit: type=1400 audit(1751816327.824:255): avc: denied { read write } for pid=6346 comm="syz.2.91" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 109.173809][ T6090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.184778][ T6090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.226554][ T30] audit: type=1400 audit(1751816327.824:256): avc: denied { open } for pid=6346 comm="syz.2.91" path="/19/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 110.051267][ T6362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.073436][ T6362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.202773][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.214951][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.357758][ T6381] block nbd3: NBD_DISCONNECT [ 110.385372][ T6381] block nbd3: NBD_DISCONNECT [ 110.393092][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.427413][ T6381] block nbd3: NBD_DISCONNECT [ 110.464483][ T6377] block nbd3: Device being setup by another task [ 110.502458][ T6377] block nbd3: Device being setup by another task [ 110.509020][ T6381] block nbd3: NBD_DISCONNECT [ 110.514441][ T6381] block nbd3: NBD_DISCONNECT [ 110.543121][ T6377] block nbd3: Device being setup by another task [ 110.582378][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 110.589014][ T6377] block nbd3: Device being setup by another task [ 110.596306][ T6381] block nbd3: NBD_DISCONNECT [ 110.601927][ T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 110.615480][ T9] usb 3-1: config 0 has no interface number 0 [ 110.625061][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 110.642237][ T5892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.643858][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.659556][ T6377] block nbd3: Device being setup by another task [ 110.662931][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.668885][ T6381] block nbd3: NBD_DISCONNECT [ 110.678313][ T9] usb 3-1: Product: syz [ 110.686988][ T9] usb 3-1: Manufacturer: syz [ 110.692486][ T9] usb 3-1: SerialNumber: syz [ 110.704219][ T9] usb 3-1: config 0 descriptor?? [ 110.723499][ T6377] block nbd3: Device being setup by another task [ 110.762437][ T6377] block nbd3: Device being setup by another task [ 110.771756][ T6381] block nbd3: NBD_DISCONNECT [ 110.802421][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 110.808862][ T6377] block nbd3: Device being setup by another task [ 110.809628][ T5892] usb 1-1: config 5 has an invalid interface number: 196 but max is 0 [ 110.825124][ T5892] usb 1-1: config 5 has no interface number 0 [ 110.831394][ T5892] usb 1-1: config 5 interface 196 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 110.843240][ T5892] usb 1-1: config 5 interface 196 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 8 [ 110.853720][ T5892] usb 1-1: config 5 interface 196 has no altsetting 0 [ 110.855418][ T6377] block nbd3: Device being setup by another task [ 110.862940][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.876782][ T5885] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.889571][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.889729][ T5892] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=f3.b3 [ 110.889995][ T6381] block nbd3: NBD_DISCONNECT [ 110.899061][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.921642][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.933091][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.937187][ T9] radio-si470x 3-1:0.35: this is not a si470x device. [ 110.945671][ T5892] usb 1-1: Product: syz [ 110.957612][ T5892] usb 1-1: Manufacturer: syz [ 110.964555][ T5892] usb 1-1: SerialNumber: syz [ 110.970682][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.980267][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.988414][ T6377] block nbd3: Device being setup by another task [ 110.996122][ T5885] usb 2-1: Product: syz [ 111.003283][ T6387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.011959][ T6387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.021522][ T5885] usb 2-1: Manufacturer: syz [ 111.032332][ T6377] block nbd3: Device being setup by another task [ 111.038879][ T6381] block nbd3: NBD_DISCONNECT [ 111.051778][ T5892] kvaser_usb 1-1:5.196: error -ENODEV: Cannot get usb endpoint(s) [ 111.061581][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 111.070887][ T6381] block nbd3: NBD_DISCONNECT [ 111.076121][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 111.095502][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 111.102334][ T6377] block nbd3: Device being setup by another task [ 111.116228][ T6381] block nbd3: NBD_DISCONNECT [ 111.123817][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 111.132681][ T6381] block nbd3: Send disconnect failed -32 [ 111.140024][ T9] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 111.155226][ T6381] block nbd3: Disconnected due to user request. [ 111.168926][ T6381] block nbd3: shutting down sockets [ 111.316946][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.357208][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.397337][ T6413] comedi comedi1: 8255: I/O port conflict (0xffffffff80008000,4) [ 111.403950][ T9] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 111.418537][ T6413] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 111.428882][ T6413] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 111.439675][ T9] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 111.483160][ T9] usb 3-1: USB disconnect, device number 6 [ 111.500502][ T9] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 111.571245][ T5958] usb 1-1: USB disconnect, device number 4 [ 111.692436][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.735028][ T6423] loop4: detected capacity change from 0 to 7 [ 111.747687][ T5835] Dev loop4: unable to read RDB block 7 [ 111.754211][ T5835] loop4: unable to read partition table [ 111.765073][ T5835] loop4: partition table beyond EOD, truncated [ 111.772670][ T6423] Dev loop4: unable to read RDB block 7 [ 111.785280][ T6423] loop4: unable to read partition table [ 111.791213][ T6423] loop4: partition table beyond EOD, truncated [ 111.800464][ T6423] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.869447][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 111.886461][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 111.893733][ T5899] usb 5-1: config index 0 descriptor too short (expected 6683, got 27) [ 111.902057][ T5899] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 111.911528][ T5899] usb 5-1: config 0 has no interface number 0 [ 111.952435][ T5899] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.978324][ T5899] usb 5-1: config 0 interface 85 has no altsetting 0 [ 111.990561][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 111.990576][ T30] audit: type=1400 audit(1751816330.664:266): avc: denied { ioctl } for pid=6411 comm="syz.4.100" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.043114][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 112.052438][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.060477][ T5899] usb 5-1: Product: syz [ 112.069532][ T5899] usb 5-1: Manufacturer: syz [ 112.078948][ T5899] usb 5-1: SerialNumber: syz [ 112.106509][ T5899] usb 5-1: config 0 descriptor?? [ 112.161590][ T30] audit: type=1400 audit(1751816330.834:267): avc: denied { read write } for pid=6434 comm="syz.2.103" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.197433][ T30] audit: type=1400 audit(1751816330.874:268): avc: denied { open } for pid=6434 comm="syz.2.103" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.235210][ T30] audit: type=1400 audit(1751816330.904:269): avc: denied { setopt } for pid=6436 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.432364][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.499082][ T6451] netlink: 'syz.0.108': attribute type 10 has an invalid length. [ 112.509872][ T6451] macvlan1: entered allmulticast mode [ 112.518987][ T6451] veth1_vlan: entered allmulticast mode [ 112.525054][ T6451] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 112.582317][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 112.608351][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.626319][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 112.640190][ T5885] usb 3-1: can't read configurations, error -71 [ 112.749063][ T5899] appletouch 5-1:0.85: Geyser mode initialized. [ 112.757840][ T5899] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input9 [ 112.828277][ T6465] warning: `syz.0.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.002766][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.100'. [ 113.118562][ T6469] syz.0.112 (6469) used greatest stack depth: 19768 bytes left [ 113.178244][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.113'. [ 113.200808][ T6473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.113'. [ 113.226775][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.113'. [ 113.334320][ T30] audit: type=1400 audit(1751816331.954:270): avc: denied { create } for pid=6480 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.837754][ T5885] usb 2-1: USB disconnect, device number 2 [ 113.889000][ T30] audit: type=1400 audit(1751816331.964:271): avc: denied { write } for pid=6480 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.910639][ T30] audit: type=1400 audit(1751816331.964:272): avc: denied { nlmsg_write } for pid=6480 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.963580][ T30] audit: type=1400 audit(1751816332.184:273): avc: denied { write } for pid=6478 comm="syz.0.114" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.991390][ T30] audit: type=1400 audit(1751816332.194:274): avc: denied { read } for pid=6478 comm="syz.0.114" path="socket:[9764]" dev="sockfs" ino=9764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.346807][ T5899] usb 5-1: USB disconnect, device number 3 [ 114.387065][ T30] audit: type=1400 audit(1751816333.064:275): avc: denied { bind } for pid=6506 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.612308][ T6512] netlink: 104 bytes leftover after parsing attributes in process `syz.1.124'. [ 114.635931][ T5899] appletouch 5-1:0.85: input: appletouch disconnected [ 114.899481][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 116.261434][ T6531] cgroup: fork rejected by pids controller in /syz3 [ 117.599485][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 117.599503][ T30] audit: type=1400 audit(1751816336.264:282): avc: denied { override_creds } for pid=6570 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.479394][ T30] audit: type=1400 audit(1751816337.154:283): avc: denied { name_bind } for pid=6597 comm="syz.4.142" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.178201][ T30] audit: type=1400 audit(1751816337.854:284): avc: denied { connect } for pid=6586 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.303477][ T30] audit: type=1400 audit(1751816337.904:285): avc: denied { connect } for pid=6606 comm="syz.4.145" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.442481][ T30] audit: type=1400 audit(1751816337.924:286): avc: denied { setopt } for pid=6606 comm="syz.4.145" laddr=fe80::11 lport=58 faddr=ff02::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.537886][ T30] audit: type=1400 audit(1751816338.144:287): avc: denied { create } for pid=6612 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 119.621960][ T30] audit: type=1400 audit(1751816338.154:288): avc: denied { block_suspend } for pid=6615 comm="syz.4.148" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.017171][ T30] audit: type=1400 audit(1751816339.694:289): avc: denied { connect } for pid=6628 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.203135][ T6113] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 121.397452][ T30] audit: type=1400 audit(1751816340.064:290): avc: denied { setopt } for pid=6645 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.494531][ T6649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.600792][ T30] audit: type=1400 audit(1751816340.274:291): avc: denied { setopt } for pid=6660 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.648715][ T6649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.087443][ T6649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.619452][ T6649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.739709][ T6649] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.806621][ T6649] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.858058][ T6649] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.870475][ T6687] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 123.882567][ T6687] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 123.890962][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.3.171 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 123.902840][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.912895][ T6687] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 123.919856][ T6687] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 123.939479][ T6687] RSP: 0018:ffffc9000cb97300 EFLAGS: 00010202 [ 123.945557][ T6687] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000d0ca000 [ 123.953528][ T6687] RDX: 000000000000000b RSI: ffffffff899358dc RDI: 0000000000000058 [ 123.961502][ T6687] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 123.969475][ T6687] R10: 00000000000affe0 R11: 0000000000000001 R12: ffffffff8ce8d260 [ 123.977447][ T6687] R13: 0000000000000058 R14: ffffffff8ce8d240 R15: ffff88802aac6800 [ 123.985417][ T6687] FS: 00007f4b550ab6c0(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 123.994353][ T6687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.000934][ T6687] CR2: 000000110c3af156 CR3: 000000002cf4e000 CR4: 00000000003526f0 [ 124.008917][ T6687] Call Trace: [ 124.012213][ T6687] [ 124.015166][ T6687] drr_qlen_notify+0x24/0x150 [ 124.019886][ T6687] qdisc_tree_reduce_backlog+0x221/0x500 [ 124.025531][ T6687] hhf_change+0x892/0xde0 [ 124.029877][ T6687] ? __pfx_hhf_change+0x10/0x10 [ 124.034777][ T6687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.040871][ T6687] hhf_init+0x2f1/0x8c0 [ 124.045034][ T6687] ? __pfx_hhf_init+0x10/0x10 [ 124.049701][ T6687] qdisc_create+0x457/0xfc0 [ 124.054198][ T6687] tc_modify_qdisc+0x12bb/0x2130 [ 124.059122][ T6687] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 124.064406][ T6687] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 124.069680][ T6687] rtnetlink_rcv_msg+0x3c9/0xe90 [ 124.074611][ T6687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.080059][ T6687] ? ref_tracker_free+0x37c/0x830 [ 124.085072][ T6687] netlink_rcv_skb+0x155/0x420 [ 124.089819][ T6687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.095271][ T6687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.100539][ T6687] ? netlink_deliver_tap+0x1ae/0xd30 [ 124.105817][ T6687] netlink_unicast+0x53a/0x7f0 [ 124.110563][ T6687] ? __pfx_netlink_unicast+0x10/0x10 [ 124.115831][ T6687] netlink_sendmsg+0x8d1/0xdd0 [ 124.120579][ T6687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.125850][ T6687] ____sys_sendmsg+0xa95/0xc70 [ 124.130597][ T6687] ? copy_msghdr_from_user+0x10a/0x160 [ 124.136042][ T6687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.141307][ T6687] ? preempt_schedule_thunk+0x16/0x30 [ 124.146669][ T6687] ? try_to_wake_up+0xa2f/0x1680 [ 124.151612][ T6687] ___sys_sendmsg+0x134/0x1d0 [ 124.156279][ T6687] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.161465][ T6687] ? __lock_acquire+0x622/0x1c90 [ 124.166394][ T6687] __sys_sendmsg+0x16d/0x220 [ 124.170973][ T6687] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.176074][ T6687] ? __x64_sys_futex+0x1e0/0x4c0 [ 124.181009][ T6687] do_syscall_64+0xcd/0x4c0 [ 124.185505][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.191395][ T6687] RIP: 0033:0x7f4b5418e929 [ 124.195793][ T6687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.215386][ T6687] RSP: 002b:00007f4b550ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.223780][ T6687] RAX: ffffffffffffffda RBX: 00007f4b543b5fa0 RCX: 00007f4b5418e929 [ 124.231738][ T6687] RDX: 0000000000004800 RSI: 0000200000000280 RDI: 0000000000000003 [ 124.239689][ T6687] RBP: 00007f4b54210b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.247643][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.255597][ T6687] R13: 0000000000000000 R14: 00007f4b543b5fa0 R15: 00007ffefcc4bd08 [ 124.263556][ T6687] [ 124.266557][ T6687] Modules linked in: [ 124.270579][ T6687] ---[ end trace 0000000000000000 ]--- [ 124.276142][ T6687] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 124.283134][ T6687] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 124.302774][ T6687] RSP: 0018:ffffc9000cb97300 EFLAGS: 00010202 [ 124.308869][ T6687] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000d0ca000 [ 124.316879][ T6687] RDX: 000000000000000b RSI: ffffffff899358dc RDI: 0000000000000058 [ 124.324895][ T6687] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 124.332906][ T6687] R10: 00000000000affe0 R11: 0000000000000001 R12: ffffffff8ce8d260 [ 124.340914][ T6687] R13: 0000000000000058 R14: ffffffff8ce8d240 R15: ffff88802aac6800 [ 124.342207][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 124.342219][ T30] audit: type=1400 audit(1751816342.984:294): avc: denied { read } for pid=5184 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 124.348921][ T6687] FS: 00007f4b550ab6c0(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 124.355977][ T30] audit: type=1400 audit(1751816342.984:295): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.376798][ T6687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.376813][ T6687] CR2: 000000110c3af156 CR3: 000000002cf4e000 CR4: 00000000003526f0 [ 124.388336][ T30] audit: type=1400 audit(1751816342.984:296): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.407204][ T6687] Kernel panic - not syncing: Fatal exception in interrupt [ 124.413983][ T6687] Kernel Offset: disabled