last executing test programs: 4.318128934s ago: executing program 0 (id=97): r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x200006) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) 4.105743716s ago: executing program 0 (id=100): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) 3.665109045s ago: executing program 3 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf251b00000010002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40088c4) 3.534633167s ago: executing program 3 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x17, 0x1003, 0x62}, 0x2c) 3.233976794s ago: executing program 3 (id=110): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="001528000000b207"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x0, 0x20, 0x48, "55062feb4bdbfebb9133c7f44026826669c2293e29fb8a7f2fde835be038870016826ab1f043fb7656e677960fd124aa840ef2c2d91999434e8ea308927eb78d533edd5222aaa3cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.148036693s ago: executing program 0 (id=112): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$cdc_ncm(0x6, 0xf3, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) close_range(r0, 0xffffffffffffffff, 0x0) 2.172872123s ago: executing program 2 (id=122): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) userfaultfd(0x80001) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.165458689s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) 2.093692157s ago: executing program 2 (id=124): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800100b, r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r2, 0x0, 0x4) 2.000455743s ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 2.000220578s ago: executing program 4 (id=127): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="8b", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="a017", 0x2}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000380)="0efaed785acf73d48a19ee4d0a4b9e6f93e93e8a93f50bdc777453d166d496f4fad81b857e4b97d4d84ff27d1b5b25ab3f1cc5902f8f33ec39eb832121168051c93c3f8a4d6ccd0098d79eb9b7b085420ff54dd131ff32e0baae8393020391046c5a2b3313a438cf04571b0ca7e3e307e1d1e4ba", 0x74}, {&(0x7f00000005c0)}, {&(0x7f00000006c0)}, {0x0}], 0x4}}], 0x3, 0x404c800) shutdown(r0, 0x2) 1.939619157s ago: executing program 4 (id=128): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) io_submit(0x0, 0x0, 0x0) 1.29770415s ago: executing program 1 (id=129): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 1.297541521s ago: executing program 2 (id=130): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.293476964s ago: executing program 4 (id=131): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 917.659703ms ago: executing program 1 (id=132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f00000000c0)) 837.757301ms ago: executing program 4 (id=133): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) 725.980548ms ago: executing program 4 (id=134): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) 705.29478ms ago: executing program 1 (id=135): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x111, 0x4b4, 0x138, 0xd4feffff, 0x200, 0x20a, 0x278, 0x200, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @local, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0x0, 0xff000000, 0x0, 0xff000000], 'ipvlan0\x00', 'nicvf0\x00', {0xff}, {}, 0xff, 0x5, 0x1, 0x76}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'sit0\x00', 'batadv_slave_1\x00', 0xc, 0x3, 0x2, 0xe, 0x3e, 0xe8e3, {0x800}, {0x8001}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x101}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 551.893378ms ago: executing program 2 (id=136): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x17, 0x1003, 0x62}, 0x2c) 551.708993ms ago: executing program 3 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0xfc0, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast}, "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"}}}, 0xfce) 503.39098ms ago: executing program 1 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 302.546755ms ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 215.903543ms ago: executing program 3 (id=140): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) io_submit(0x0, 0x0, 0x0) 215.179105ms ago: executing program 1 (id=150): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x17, 0x1003, 0x62}, 0x2c) 214.561216ms ago: executing program 2 (id=141): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) 121.692959ms ago: executing program 0 (id=142): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="8b", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="a017", 0x2}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000380)="0efaed785acf73d48a19ee4d0a4b9e6f93e93e8a93f50bdc777453d166d496f4fad81b857e4b97d4d84ff27d1b5b25ab3f1cc5902f8f33ec39eb832121168051c93c3f8a4d6ccd0098d79eb9b7b085420ff54dd131ff32e0baae8393020391046c5a2b3313a438cf04571b0ca7e3e307e1d1e4ba", 0x74}, {&(0x7f00000005c0)}, {&(0x7f00000006c0)}, {0x0}], 0x4}}], 0x3, 0x404c800) shutdown(r0, 0x2) 1.856071ms ago: executing program 0 (id=143): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f00000000c0)) 1.676105ms ago: executing program 3 (id=144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=155): syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 65.693300][ T30] audit: type=1400 audit(1762511115.527:62): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.717040][ T30] audit: type=1400 audit(1762511115.547:63): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.720474][ T5799] cgroup: Unknown subsys name 'net' [ 65.746304][ T30] audit: type=1400 audit(1762511115.577:64): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.895172][ T5799] cgroup: Unknown subsys name 'cpuset' [ 65.903340][ T5799] cgroup: Unknown subsys name 'rlimit' [ 66.041174][ T30] audit: type=1400 audit(1762511115.867:65): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.077245][ T30] audit: type=1400 audit(1762511115.867:66): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.105311][ T30] audit: type=1400 audit(1762511115.867:67): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.125745][ T30] audit: type=1400 audit(1762511115.867:68): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.148880][ T30] audit: type=1400 audit(1762511115.867:69): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.173723][ T30] audit: type=1400 audit(1762511115.867:70): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.197204][ T30] audit: type=1400 audit(1762511115.907:71): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.201265][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.259319][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.440632][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.449044][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.457576][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.465766][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.466606][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.473973][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.483097][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.487973][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.496092][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.508680][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.516552][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.516882][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.524598][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.532620][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.539023][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.545934][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.552943][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.559546][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.565325][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.588509][ T5137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.599960][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.615979][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.634100][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.652193][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.660214][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.020483][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 70.076684][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 70.203126][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.210683][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.218482][ T5812] bridge_slave_0: entered allmulticast mode [ 70.225457][ T5812] bridge_slave_0: entered promiscuous mode [ 70.270725][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.278207][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.285659][ T5812] bridge_slave_1: entered allmulticast mode [ 70.292622][ T5812] bridge_slave_1: entered promiscuous mode [ 70.399088][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.406568][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.414216][ T5810] bridge_slave_0: entered allmulticast mode [ 70.421037][ T5810] bridge_slave_0: entered promiscuous mode [ 70.434951][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.455023][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.463630][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.470809][ T5810] bridge_slave_1: entered allmulticast mode [ 70.478194][ T5810] bridge_slave_1: entered promiscuous mode [ 70.484826][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 70.496325][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.586694][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.599360][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.619537][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 70.652344][ T5812] team0: Port device team_slave_0 added [ 70.690694][ T5812] team0: Port device team_slave_1 added [ 70.698030][ T5810] team0: Port device team_slave_0 added [ 70.704178][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 70.738406][ T5810] team0: Port device team_slave_1 added [ 70.813568][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.820515][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.846639][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.867387][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.874431][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.900649][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.916299][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.923814][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.930928][ T5809] bridge_slave_0: entered allmulticast mode [ 70.937994][ T5809] bridge_slave_0: entered promiscuous mode [ 70.945480][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.952510][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.978494][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.994822][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.001767][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.028214][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.054915][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.062244][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.069396][ T5809] bridge_slave_1: entered allmulticast mode [ 71.076494][ T5809] bridge_slave_1: entered promiscuous mode [ 71.119529][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.126813][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.134124][ T5825] bridge_slave_0: entered allmulticast mode [ 71.140919][ T5825] bridge_slave_0: entered promiscuous mode [ 71.166028][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.173246][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.180375][ T5825] bridge_slave_1: entered allmulticast mode [ 71.187555][ T5825] bridge_slave_1: entered promiscuous mode [ 71.196340][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.235906][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.242384][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.266426][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.298947][ T5812] hsr_slave_0: entered promiscuous mode [ 71.305352][ T5812] hsr_slave_1: entered promiscuous mode [ 71.334126][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.341285][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.348748][ T5815] bridge_slave_0: entered allmulticast mode [ 71.355789][ T5815] bridge_slave_0: entered promiscuous mode [ 71.367289][ T5810] hsr_slave_0: entered promiscuous mode [ 71.373802][ T5810] hsr_slave_1: entered promiscuous mode [ 71.379727][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 71.385654][ T5810] Cannot create hsr debugfs directory [ 71.394275][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.414345][ T5809] team0: Port device team_slave_0 added [ 71.421493][ T5809] team0: Port device team_slave_1 added [ 71.427578][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.434981][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.442187][ T5815] bridge_slave_1: entered allmulticast mode [ 71.448952][ T5815] bridge_slave_1: entered promiscuous mode [ 71.470644][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.549276][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.552933][ T5821] Bluetooth: hci2: command tx timeout [ 71.556957][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.587755][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.601077][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.642425][ T5824] Bluetooth: hci0: command tx timeout [ 71.642940][ T5821] Bluetooth: hci1: command tx timeout [ 71.654682][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.661619][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.687911][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.700889][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.712258][ T5821] Bluetooth: hci4: command tx timeout [ 71.712263][ T5824] Bluetooth: hci3: command tx timeout [ 71.717859][ T5825] team0: Port device team_slave_0 added [ 71.754982][ T5825] team0: Port device team_slave_1 added [ 71.811278][ T5815] team0: Port device team_slave_0 added [ 71.855938][ T5815] team0: Port device team_slave_1 added [ 71.866671][ T5809] hsr_slave_0: entered promiscuous mode [ 71.874520][ T5809] hsr_slave_1: entered promiscuous mode [ 71.881694][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 71.887763][ T5809] Cannot create hsr debugfs directory [ 71.893907][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.900846][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.926834][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.968080][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.975439][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.001796][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.027569][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.034900][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.060875][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.073235][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.080183][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.106183][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.250704][ T5825] hsr_slave_0: entered promiscuous mode [ 72.257109][ T5825] hsr_slave_1: entered promiscuous mode [ 72.263642][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 72.269537][ T5825] Cannot create hsr debugfs directory [ 72.297236][ T5815] hsr_slave_0: entered promiscuous mode [ 72.303520][ T5815] hsr_slave_1: entered promiscuous mode [ 72.309468][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 72.315384][ T5815] Cannot create hsr debugfs directory [ 72.489565][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.518408][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.539212][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.567469][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.641763][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.659630][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.669939][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.690859][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.774948][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.784486][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.796462][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.810365][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.904965][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.928323][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.936107][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.945955][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.983815][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.038101][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.050831][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.063052][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.095622][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.106080][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.125061][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.140109][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.153484][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.160694][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.185215][ T1566] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.192422][ T1566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.228310][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.243436][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.256822][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.263914][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.287614][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.294760][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.316578][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.323680][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.355912][ T1566] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.363009][ T1566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.440971][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 73.440987][ T30] audit: type=1400 audit(1762511123.267:86): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.591361][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.628832][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.642097][ T5821] Bluetooth: hci2: command tx timeout [ 73.715090][ T5821] Bluetooth: hci0: command tx timeout [ 73.715188][ T5824] Bluetooth: hci1: command tx timeout [ 73.727993][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.748956][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.792419][ T5824] Bluetooth: hci3: command tx timeout [ 73.794852][ T5821] Bluetooth: hci4: command tx timeout [ 73.808832][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.815992][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.828846][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.836023][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.850854][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.857960][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.867030][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.874119][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.892275][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.957080][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.977397][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.097016][ T5812] veth0_vlan: entered promiscuous mode [ 74.166385][ T5809] veth0_vlan: entered promiscuous mode [ 74.184042][ T5812] veth1_vlan: entered promiscuous mode [ 74.217271][ T5809] veth1_vlan: entered promiscuous mode [ 74.249085][ T5812] veth0_macvtap: entered promiscuous mode [ 74.285586][ T5812] veth1_macvtap: entered promiscuous mode [ 74.306967][ T5809] veth0_macvtap: entered promiscuous mode [ 74.350717][ T5809] veth1_macvtap: entered promiscuous mode [ 74.397412][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.428095][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.475134][ T1566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.485323][ T1566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.503462][ T1566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.512628][ T1566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.540659][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.558300][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.568852][ T5810] veth0_vlan: entered promiscuous mode [ 74.584990][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.598093][ T5810] veth1_vlan: entered promiscuous mode [ 74.607033][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.629792][ T3434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.655875][ T3434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.665514][ T3434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.690864][ T3434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.766168][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.777440][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.793492][ T5810] veth0_macvtap: entered promiscuous mode [ 74.831450][ T5810] veth1_macvtap: entered promiscuous mode [ 74.850647][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.859409][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.876837][ T5815] veth0_vlan: entered promiscuous mode [ 74.938526][ T5815] veth1_vlan: entered promiscuous mode [ 74.946980][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.947479][ T5825] veth0_vlan: entered promiscuous mode [ 74.960565][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.970259][ T5825] veth1_vlan: entered promiscuous mode [ 74.978360][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.994427][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.023186][ T30] audit: type=1400 audit(1762511124.837:87): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.2jbi3y/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.056649][ T30] audit: type=1400 audit(1762511124.837:88): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.061409][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.109806][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.120657][ T30] audit: type=1400 audit(1762511124.847:89): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.2jbi3y/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.125510][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.160385][ T30] audit: type=1400 audit(1762511124.847:90): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.192973][ T30] audit: type=1400 audit(1762511124.847:91): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.2jbi3y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.223997][ T30] audit: type=1400 audit(1762511124.847:92): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.2jbi3y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.256408][ T3434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.260270][ T30] audit: type=1400 audit(1762511124.857:93): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.285741][ T30] audit: type=1400 audit(1762511124.877:94): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.288414][ T3434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.319822][ T30] audit: type=1400 audit(1762511124.877:95): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="gadgetfs" ino=7118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.353629][ T3434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.363399][ T3434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.388259][ T5815] veth0_macvtap: entered promiscuous mode [ 75.431267][ T5815] veth1_macvtap: entered promiscuous mode [ 75.582135][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.601298][ T5825] veth0_macvtap: entered promiscuous mode [ 75.630528][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.637792][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.667259][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.712633][ T5821] Bluetooth: hci2: command tx timeout [ 75.726716][ T5825] veth1_macvtap: entered promiscuous mode [ 75.749372][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.759894][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.786574][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.792720][ T5821] Bluetooth: hci0: command tx timeout [ 75.796214][ T5824] Bluetooth: hci1: command tx timeout [ 75.814346][ T5936] syzkaller1: entered promiscuous mode [ 75.819894][ T5936] syzkaller1: entered allmulticast mode [ 75.858393][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.862704][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.872936][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.880746][ T5824] Bluetooth: hci4: command tx timeout [ 75.886391][ T5821] Bluetooth: hci3: command tx timeout [ 75.894254][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.901589][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.962259][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.985567][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.995379][ T5944] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10'. [ 75.995387][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.037901][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.168797][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.185397][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.239918][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.261367][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.325648][ T1566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.349435][ T1566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.495367][ T1566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.515619][ T1566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.683947][ T5956] sctp: [Deprecated]: syz.4.13 (pid 5956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.683947][ T5956] Use struct sctp_sack_info instead [ 77.795303][ T5824] Bluetooth: hci2: command tx timeout [ 77.876216][ T5824] Bluetooth: hci1: command tx timeout [ 77.876225][ T5821] Bluetooth: hci0: command tx timeout [ 77.901120][ T5811] udevd[5811]: failed to send result of seq 11107 to main daemon: Connection refused [ 77.952630][ T5824] Bluetooth: hci3: command tx timeout [ 77.956035][ T5821] Bluetooth: hci4: command tx timeout [ 78.343592][ T6013] syzkaller1: entered promiscuous mode [ 78.349086][ T6013] syzkaller1: entered allmulticast mode [ 78.448600][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 78.448622][ T30] audit: type=1400 audit(1762511128.277:128): avc: denied { ioctl } for pid=6014 comm="syz.2.37" path="socket:[8910]" dev="sockfs" ino=8910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.550329][ T6019] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 78.882706][ T30] audit: type=1400 audit(1762511128.717:129): avc: denied { name_bind } for pid=6026 comm="syz.3.41" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.950817][ T30] audit: type=1400 audit(1762511128.717:130): avc: denied { node_bind } for pid=6026 comm="syz.3.41" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.053996][ T30] audit: type=1400 audit(1762511128.887:131): avc: denied { create } for pid=6032 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.121964][ T30] audit: type=1400 audit(1762511128.917:132): avc: denied { read } for pid=6034 comm="syz.4.46" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.148479][ T30] audit: type=1400 audit(1762511128.917:133): avc: denied { open } for pid=6034 comm="syz.4.46" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.176518][ T30] audit: type=1400 audit(1762511128.917:134): avc: denied { ioctl } for pid=6034 comm="syz.4.46" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.209996][ T30] audit: type=1400 audit(1762511128.927:135): avc: denied { mounton } for pid=6032 comm="syz.3.44" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.239818][ T30] audit: type=1400 audit(1762511128.937:136): avc: denied { create } for pid=6036 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.267693][ T30] audit: type=1400 audit(1762511129.037:137): avc: denied { setopt } for pid=6036 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.318842][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 79.344733][ T6045] bridge_slave_1: left allmulticast mode [ 79.355626][ T6045] bridge_slave_1: left promiscuous mode [ 79.365503][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.380857][ T6047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6047 comm=syz.4.52 [ 79.397508][ T6045] bridge_slave_0: left allmulticast mode [ 79.407124][ T6045] bridge_slave_0: left promiscuous mode [ 79.413370][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.462837][ T5868] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.621968][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 79.631008][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.644543][ T5868] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 79.657942][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.693806][ T5868] usb 1-1: config 0 descriptor?? [ 79.742918][ T979] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.904986][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.915716][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.926184][ T979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 79.940214][ T979] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.950055][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.973558][ T6054] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.993683][ T979] hub 4-1:1.0: bad descriptor, ignoring hub [ 80.020820][ T979] hub 4-1:1.0: probe with driver hub failed with error -5 [ 80.030494][ T979] cdc_wdm 4-1:1.0: skipping garbage [ 80.036932][ T979] cdc_wdm 4-1:1.0: skipping garbage [ 80.068597][ T979] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 80.074790][ T979] cdc_wdm 4-1:1.0: Unknown control protocol [ 80.094758][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 80.121401][ T5868] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 80.352855][ T5876] usb 4-1: USB disconnect, device number 2 [ 80.372814][ T5875] usb 1-1: USB disconnect, device number 2 [ 80.631173][ T6089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.70'. [ 80.673310][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.833378][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 80.858183][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.870763][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 80.887426][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.899862][ T24] usb 5-1: Product: syz [ 80.904821][ T24] usb 5-1: Manufacturer: syz [ 80.909569][ T24] usb 5-1: SerialNumber: syz [ 80.920829][ T24] usb 5-1: config 0 descriptor?? [ 81.152595][ T5824] Bluetooth: hci5: command 0xfc11 tx timeout [ 81.159447][ T5821] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 81.286015][ T6106] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 81.336640][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 81.379842][ T6108] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 81.408598][ T6110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'. [ 81.411037][ T6096] mmap: syz.2.72 (6096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.473149][ T976] cfg80211: failed to load regulatory.db [ 81.757272][ T24] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 81.777465][ T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 81.786265][ T6119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.812214][ T6119] block device autoloading is deprecated and will be removed. [ 81.974161][ T24] usb 5-1: USB disconnect, device number 2 [ 82.337185][ T6134] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.731510][ T24] IPVS: starting estimator thread 0... [ 82.743036][ T6149] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 82.775615][ T976] libceph: connect (1)[c::]:6789 error -101 [ 82.786217][ T6152] ceph: No mds server is up or the cluster is laggy [ 82.796093][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 82.812922][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 82.828959][ T6158] netlink: 'syz.3.96': attribute type 7 has an invalid length. [ 82.852785][ T6154] IPVS: using max 33 ests per chain, 79200 per kthread [ 82.865437][ T6158] netlink: 'syz.3.96': attribute type 8 has an invalid length. [ 82.902041][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 82.939357][ T6158] erspan0: entered promiscuous mode [ 82.949341][ T6158] gretap0: entered promiscuous mode [ 83.055231][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 83.065018][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 83.065047][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.065060][ T5821] Workqueue: hci2 hci_rx_work [ 83.065107][ T5821] Call Trace: [ 83.065115][ T5821] [ 83.065123][ T5821] dump_stack_lvl+0x16c/0x1f0 [ 83.065163][ T5821] sysfs_warn_dup+0x7f/0xa0 [ 83.065190][ T5821] sysfs_create_dir_ns+0x24b/0x2b0 [ 83.065215][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 83.065238][ T5821] ? find_held_lock+0x2b/0x80 [ 83.065268][ T5821] ? do_raw_spin_unlock+0x172/0x230 [ 83.065293][ T5821] kobject_add_internal+0x2c4/0x9b0 [ 83.065320][ T5821] kobject_add+0x16e/0x240 [ 83.065341][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 83.065365][ T5821] ? do_raw_spin_unlock+0x172/0x230 [ 83.065387][ T5821] ? kobject_put+0xab/0x5a0 [ 83.065417][ T5821] device_add+0x288/0x1aa0 [ 83.065443][ T5821] ? __pfx_dev_set_name+0x10/0x10 [ 83.065470][ T5821] ? __pfx_device_add+0x10/0x10 [ 83.065494][ T5821] ? mgmt_send_event_skb+0x2fb/0x460 [ 83.065531][ T5821] hci_conn_add_sysfs+0x17e/0x230 [ 83.065552][ T5821] le_conn_complete_evt+0x1260/0x2150 [ 83.065591][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 83.065620][ T5821] ? hci_event_packet+0x459/0x11c0 [ 83.065654][ T5821] hci_le_conn_complete_evt+0x23c/0x370 [ 83.065690][ T5821] hci_le_meta_evt+0x357/0x5e0 [ 83.065720][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 83.065753][ T5821] hci_event_packet+0x685/0x11c0 [ 83.065782][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 83.065815][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 83.065846][ T5821] ? kcov_remote_start+0x3c9/0x6d0 [ 83.065871][ T5821] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.065910][ T5821] hci_rx_work+0x2c5/0x16b0 [ 83.065942][ T5821] ? rcu_is_watching+0x12/0xc0 [ 83.065974][ T5821] process_one_work+0x9cf/0x1b70 [ 83.066009][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 83.066041][ T5821] ? assign_work+0x1a0/0x250 [ 83.066065][ T5821] worker_thread+0x6c8/0xf10 [ 83.066110][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 83.066134][ T5821] kthread+0x3c5/0x780 [ 83.066157][ T5821] ? __pfx_kthread+0x10/0x10 [ 83.066180][ T5821] ? rcu_is_watching+0x12/0xc0 [ 83.066207][ T5821] ? __pfx_kthread+0x10/0x10 [ 83.066229][ T5821] ret_from_fork+0x675/0x7d0 [ 83.066247][ T5821] ? __pfx_kthread+0x10/0x10 [ 83.066268][ T5821] ret_from_fork_asm+0x1a/0x30 [ 83.066314][ T5821] [ 83.066341][ T5821] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 83.328052][ T5821] Bluetooth: hci2: failed to register connection device [ 83.422782][ T6175] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 83.554780][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.106'. [ 83.746714][ T5875] IPVS: starting estimator thread 0... [ 83.754985][ T6186] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.873772][ T6188] IPVS: using max 34 ests per chain, 81600 per kthread [ 84.244017][ T5875] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.389610][ T5824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 84.399458][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 84.399489][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.399502][ T5824] Workqueue: hci4 hci_rx_work [ 84.399546][ T5824] Call Trace: [ 84.399553][ T5824] [ 84.399562][ T5824] dump_stack_lvl+0x16c/0x1f0 [ 84.399598][ T5824] sysfs_warn_dup+0x7f/0xa0 [ 84.399625][ T5824] sysfs_create_dir_ns+0x24b/0x2b0 [ 84.399652][ T5824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.399678][ T5824] ? find_held_lock+0x2b/0x80 [ 84.399710][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 84.399737][ T5824] kobject_add_internal+0x2c4/0x9b0 [ 84.399766][ T5824] kobject_add+0x16e/0x240 [ 84.399788][ T5824] ? __pfx_kobject_add+0x10/0x10 [ 84.399812][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 84.399835][ T5824] ? kobject_put+0xab/0x5a0 [ 84.399866][ T5824] device_add+0x288/0x1aa0 [ 84.399892][ T5824] ? __pfx_dev_set_name+0x10/0x10 [ 84.399919][ T5824] ? __pfx_device_add+0x10/0x10 [ 84.399945][ T5824] ? mgmt_send_event_skb+0x2fb/0x460 [ 84.399992][ T5824] hci_conn_add_sysfs+0x17e/0x230 [ 84.400015][ T5824] le_conn_complete_evt+0x1260/0x2150 [ 84.400054][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 84.400084][ T5824] ? hci_event_packet+0x459/0x11c0 [ 84.400119][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 84.400154][ T5824] hci_le_meta_evt+0x357/0x5e0 [ 84.400183][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 84.400219][ T5824] hci_event_packet+0x685/0x11c0 [ 84.400248][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 84.400281][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 84.400313][ T5824] ? kcov_remote_start+0x3c9/0x6d0 [ 84.400339][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.400378][ T5824] hci_rx_work+0x2c5/0x16b0 [ 84.400411][ T5824] ? rcu_is_watching+0x12/0xc0 [ 84.400442][ T5824] process_one_work+0x9cf/0x1b70 [ 84.400478][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 84.400510][ T5824] ? assign_work+0x1a0/0x250 [ 84.400534][ T5824] worker_thread+0x6c8/0xf10 [ 84.400572][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 84.400594][ T5824] kthread+0x3c5/0x780 [ 84.400616][ T5824] ? __pfx_kthread+0x10/0x10 [ 84.400638][ T5824] ? rcu_is_watching+0x12/0xc0 [ 84.400664][ T5824] ? __pfx_kthread+0x10/0x10 [ 84.400685][ T5824] ret_from_fork+0x675/0x7d0 [ 84.400703][ T5824] ? __pfx_kthread+0x10/0x10 [ 84.400724][ T5824] ret_from_fork_asm+0x1a/0x30 [ 84.400769][ T5824] [ 84.400796][ T5824] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.414280][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 84.421153][ T5824] Bluetooth: hci4: failed to register connection device [ 84.462275][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.726532][ T5875] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 84.745808][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.754626][ T5875] usb 4-1: Product: syz [ 84.758902][ T5875] usb 4-1: Manufacturer: syz [ 84.763581][ T5875] usb 4-1: SerialNumber: syz [ 84.766606][ T5875] usb 4-1: config 0 descriptor?? [ 84.899968][ T6219] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 84.909881][ T5876] IPVS: starting estimator thread 0... [ 85.011988][ T6222] IPVS: using max 36 ests per chain, 86400 per kthread [ 85.187273][ T5875] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 85.597023][ T5875] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 85.606555][ T5875] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 85.712965][ T36] wlan1: Trigger new scan to find an IBSS to join [ 85.855494][ T5875] usb 4-1: USB disconnect, device number 3 [ 85.881615][ T5824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 85.891582][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 85.891612][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.891630][ T5824] Workqueue: hci1 hci_rx_work [ 85.891669][ T5824] Call Trace: [ 85.891677][ T5824] [ 85.891686][ T5824] dump_stack_lvl+0x16c/0x1f0 [ 85.891722][ T5824] sysfs_warn_dup+0x7f/0xa0 [ 85.891749][ T5824] sysfs_create_dir_ns+0x24b/0x2b0 [ 85.891775][ T5824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.891798][ T5824] ? find_held_lock+0x2b/0x80 [ 85.891830][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 85.891852][ T5824] kobject_add_internal+0x2c4/0x9b0 [ 85.891879][ T5824] kobject_add+0x16e/0x240 [ 85.891900][ T5824] ? __pfx_kobject_add+0x10/0x10 [ 85.891920][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 85.891942][ T5824] ? kobject_put+0xab/0x5a0 [ 85.891967][ T5824] device_add+0x288/0x1aa0 [ 85.891991][ T5824] ? __pfx_dev_set_name+0x10/0x10 [ 85.892013][ T5824] ? __pfx_device_add+0x10/0x10 [ 85.892035][ T5824] ? mgmt_send_event_skb+0x2fb/0x460 [ 85.892085][ T5824] hci_conn_add_sysfs+0x17e/0x230 [ 85.892109][ T5824] le_conn_complete_evt+0x1260/0x2150 [ 85.892147][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 85.892175][ T5824] ? hci_event_packet+0x459/0x11c0 [ 85.892214][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 85.892257][ T5824] hci_le_meta_evt+0x357/0x5e0 [ 85.892295][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 85.892334][ T5824] hci_event_packet+0x685/0x11c0 [ 85.892365][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 85.892398][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 85.892434][ T5824] ? kcov_remote_start+0x3c9/0x6d0 [ 85.892460][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.892499][ T5824] hci_rx_work+0x2c5/0x16b0 [ 85.892537][ T5824] ? rcu_is_watching+0x12/0xc0 [ 85.892571][ T5824] process_one_work+0x9cf/0x1b70 [ 85.892608][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 85.892641][ T5824] ? assign_work+0x1a0/0x250 [ 85.892666][ T5824] worker_thread+0x6c8/0xf10 [ 85.892703][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 85.892730][ T5824] kthread+0x3c5/0x780 [ 85.892751][ T5824] ? __pfx_kthread+0x10/0x10 [ 85.892773][ T5824] ? rcu_is_watching+0x12/0xc0 [ 85.892798][ T5824] ? __pfx_kthread+0x10/0x10 [ 85.892823][ T5824] ret_from_fork+0x675/0x7d0 [ 85.892845][ T5824] ? __pfx_kthread+0x10/0x10 [ 85.892866][ T5824] ret_from_fork_asm+0x1a/0x30 [ 85.892916][ T5824] [ 86.140850][ T5137] Bluetooth: hci5: command 0xfc11 tx timeout [ 86.148612][ T5821] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 86.157457][ T5824] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.172172][ T5824] Bluetooth: hci1: failed to register connection device [ 86.698121][ T5868] IPVS: starting estimator thread 0... [ 86.704249][ T6260] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 86.812233][ T6263] IPVS: using max 35 ests per chain, 84000 per kthread [ 87.053971][ T6273] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.061141][ T976] IPVS: starting estimator thread 0... [ 87.152118][ T6276] IPVS: using max 42 ests per chain, 100800 per kthread [ 87.179801][ T5824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 87.190752][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 87.190783][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.190798][ T5824] Workqueue: hci3 hci_rx_work [ 87.190834][ T5824] Call Trace: [ 87.190841][ T5824] [ 87.190850][ T5824] dump_stack_lvl+0x16c/0x1f0 [ 87.190886][ T5824] sysfs_warn_dup+0x7f/0xa0 [ 87.190912][ T5824] sysfs_create_dir_ns+0x24b/0x2b0 [ 87.190939][ T5824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.190963][ T5824] ? find_held_lock+0x2b/0x80 [ 87.190995][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 87.191029][ T5824] kobject_add_internal+0x2c4/0x9b0 [ 87.191054][ T5824] kobject_add+0x16e/0x240 [ 87.191074][ T5824] ? __pfx_kobject_add+0x10/0x10 [ 87.191098][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 87.191121][ T5824] ? kobject_put+0xab/0x5a0 [ 87.191151][ T5824] device_add+0x288/0x1aa0 [ 87.191177][ T5824] ? __pfx_dev_set_name+0x10/0x10 [ 87.191205][ T5824] ? __pfx_device_add+0x10/0x10 [ 87.191232][ T5824] ? mgmt_send_event_skb+0x2fb/0x460 [ 87.191270][ T5824] hci_conn_add_sysfs+0x17e/0x230 [ 87.191288][ T5824] le_conn_complete_evt+0x1260/0x2150 [ 87.191322][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.191349][ T5824] ? hci_event_packet+0x459/0x11c0 [ 87.191388][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 87.191424][ T5824] hci_le_meta_evt+0x357/0x5e0 [ 87.191451][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 87.191479][ T5824] hci_event_packet+0x685/0x11c0 [ 87.191504][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.191532][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 87.191560][ T5824] ? kcov_remote_start+0x3c9/0x6d0 [ 87.191584][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.191618][ T5824] hci_rx_work+0x2c5/0x16b0 [ 87.191646][ T5824] ? rcu_is_watching+0x12/0xc0 [ 87.191676][ T5824] process_one_work+0x9cf/0x1b70 [ 87.191711][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 87.191747][ T5824] ? assign_work+0x1a0/0x250 [ 87.191769][ T5824] worker_thread+0x6c8/0xf10 [ 87.191800][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 87.191820][ T5824] kthread+0x3c5/0x780 [ 87.191838][ T5824] ? __pfx_kthread+0x10/0x10 [ 87.191857][ T5824] ? rcu_is_watching+0x12/0xc0 [ 87.191881][ T5824] ? __pfx_kthread+0x10/0x10 [ 87.191899][ T5824] ret_from_fork+0x675/0x7d0 [ 87.191916][ T5824] ? __pfx_kthread+0x10/0x10 [ 87.191935][ T5824] ret_from_fork_asm+0x1a/0x30 [ 87.191989][ T5824] [ 87.439156][ T5824] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.453587][ T5824] Bluetooth: hci3: failed to register connection device [ 87.490460][ T5824] ================================================================== [ 87.498539][ T5824] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 87.506454][ T5824] Read of size 8 at addr ffff88802539e480 by task kworker/u9:7/5824 [ 87.514433][ T5824] [ 87.516762][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 87.516792][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.516806][ T5824] Workqueue: hci3 hci_rx_work [ 87.516843][ T5824] Call Trace: [ 87.516852][ T5824] [ 87.516861][ T5824] dump_stack_lvl+0x116/0x1f0 [ 87.516898][ T5824] print_report+0xcd/0x630 [ 87.516922][ T5824] ? __virt_addr_valid+0x81/0x610 [ 87.516950][ T5824] ? __phys_addr+0xe8/0x180 [ 87.516980][ T5824] ? l2cap_connect_cfm+0xdb9/0xf80 [ 87.517009][ T5824] kasan_report+0xe0/0x110 [ 87.517032][ T5824] ? l2cap_connect_cfm+0xdb9/0xf80 [ 87.517063][ T5824] l2cap_connect_cfm+0xdb9/0xf80 [ 87.517095][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 87.517130][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 87.517158][ T5824] le_conn_complete_evt+0x1ba6/0x2150 [ 87.517192][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.517221][ T5824] ? hci_event_packet+0x459/0x11c0 [ 87.517254][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 87.517286][ T5824] hci_le_meta_evt+0x357/0x5e0 [ 87.517315][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 87.517346][ T5824] hci_event_packet+0x685/0x11c0 [ 87.517374][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.517406][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 87.517435][ T5824] ? kcov_remote_start+0x3c9/0x6d0 [ 87.517461][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.517496][ T5824] hci_rx_work+0x2c5/0x16b0 [ 87.517527][ T5824] ? rcu_is_watching+0x12/0xc0 [ 87.517555][ T5824] process_one_work+0x9cf/0x1b70 [ 87.517583][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 87.517610][ T5824] ? assign_work+0x1a0/0x250 [ 87.517631][ T5824] worker_thread+0x6c8/0xf10 [ 87.517659][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 87.517681][ T5824] kthread+0x3c5/0x780 [ 87.517711][ T5824] ? __pfx_kthread+0x10/0x10 [ 87.517733][ T5824] ? rcu_is_watching+0x12/0xc0 [ 87.517759][ T5824] ? __pfx_kthread+0x10/0x10 [ 87.517780][ T5824] ret_from_fork+0x675/0x7d0 [ 87.517799][ T5824] ? __pfx_kthread+0x10/0x10 [ 87.517821][ T5824] ret_from_fork_asm+0x1a/0x30 [ 87.517857][ T5824] [ 87.517864][ T5824] [ 87.725507][ T5824] Allocated by task 5824: [ 87.729813][ T5824] kasan_save_stack+0x33/0x60 [ 87.734482][ T5824] kasan_save_track+0x14/0x30 [ 87.739140][ T5824] __kasan_kmalloc+0xaa/0xb0 [ 87.743712][ T5824] l2cap_chan_create+0x44/0x920 [ 87.748551][ T5824] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 87.754347][ T5824] l2cap_sock_new_connection_cb+0x101/0x240 [ 87.760223][ T5824] l2cap_connect_cfm+0x4c7/0xf80 [ 87.765148][ T5824] le_conn_complete_evt+0x1ba6/0x2150 [ 87.770512][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 87.776045][ T5824] hci_le_meta_evt+0x357/0x5e0 [ 87.780801][ T5824] hci_event_packet+0x685/0x11c0 [ 87.785726][ T5824] hci_rx_work+0x2c5/0x16b0 [ 87.790230][ T5824] process_one_work+0x9cf/0x1b70 [ 87.795152][ T5824] worker_thread+0x6c8/0xf10 [ 87.799725][ T5824] kthread+0x3c5/0x780 [ 87.803778][ T5824] ret_from_fork+0x675/0x7d0 [ 87.808347][ T5824] ret_from_fork_asm+0x1a/0x30 [ 87.813104][ T5824] [ 87.815403][ T5824] Freed by task 6281: [ 87.819366][ T5824] kasan_save_stack+0x33/0x60 [ 87.824021][ T5824] kasan_save_track+0x14/0x30 [ 87.828673][ T5824] __kasan_save_free_info+0x3b/0x60 [ 87.833854][ T5824] __kasan_slab_free+0x5f/0x80 [ 87.838600][ T5824] kfree+0x2b8/0x6d0 [ 87.842476][ T5824] l2cap_chan_put+0x216/0x2c0 [ 87.847135][ T5824] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 87.852664][ T5824] l2cap_sock_release+0x69/0x250 [ 87.857578][ T5824] __sock_release+0xb3/0x270 [ 87.862151][ T5824] sock_close+0x1c/0x30 [ 87.866289][ T5824] __fput+0x402/0xb70 [ 87.870251][ T5824] task_work_run+0x150/0x240 [ 87.874822][ T5824] exit_to_user_mode_loop+0xec/0x130 [ 87.880095][ T5824] do_syscall_64+0x426/0xfa0 [ 87.884667][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.890541][ T5824] [ 87.892842][ T5824] The buggy address belongs to the object at ffff88802539e000 [ 87.892842][ T5824] which belongs to the cache kmalloc-2k of size 2048 [ 87.906870][ T5824] The buggy address is located 1152 bytes inside of [ 87.906870][ T5824] freed 2048-byte region [ffff88802539e000, ffff88802539e800) [ 87.920815][ T5824] [ 87.923115][ T5824] The buggy address belongs to the physical page: [ 87.929507][ T5824] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25398 [ 87.938241][ T5824] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.946715][ T5824] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.954252][ T5824] page_type: f5(slab) [ 87.958215][ T5824] raw: 00fff00000000040 ffff88813ffa7000 dead000000000100 dead000000000122 [ 87.966775][ T5824] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 87.975339][ T5824] head: 00fff00000000040 ffff88813ffa7000 dead000000000100 dead000000000122 [ 87.983985][ T5824] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 87.992634][ T5824] head: 00fff00000000003 ffffea000094e601 00000000ffffffff 00000000ffffffff [ 88.001281][ T5824] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 88.009926][ T5824] page dumped because: kasan: bad access detected [ 88.016341][ T5824] page_owner tracks the page as allocated [ 88.022030][ T5824] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5810, tgid 5810 (syz-executor), ts 70428810984, free_ts 70391707485 [ 88.043369][ T5824] post_alloc_hook+0x1c0/0x230 [ 88.048121][ T5824] get_page_from_freelist+0x10a3/0x3a30 [ 88.053651][ T5824] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 88.059527][ T5824] alloc_pages_mpol+0x1fb/0x550 [ 88.064443][ T5824] new_slab+0x24a/0x360 [ 88.068582][ T5824] ___slab_alloc+0xdae/0x1a60 [ 88.073240][ T5824] __slab_alloc.constprop.0+0x63/0x110 [ 88.078687][ T5824] __kmalloc_cache_noprof+0x477/0x780 [ 88.084046][ T5824] rtnl_newlink+0x11b/0x2000 [ 88.088621][ T5824] rtnetlink_rcv_msg+0x95e/0xe90 [ 88.093542][ T5824] netlink_rcv_skb+0x158/0x420 [ 88.098291][ T5824] netlink_unicast+0x5aa/0x870 [ 88.103036][ T5824] netlink_sendmsg+0x8c8/0xdd0 [ 88.107785][ T5824] __sys_sendto+0x4a3/0x520 [ 88.112272][ T5824] __x64_sys_sendto+0xe0/0x1c0 [ 88.117015][ T5824] do_syscall_64+0xcd/0xfa0 [ 88.121496][ T5824] page last free pid 5825 tgid 5825 stack trace: [ 88.127793][ T5824] __free_frozen_pages+0x7df/0x1160 [ 88.132975][ T5824] __put_partials+0x130/0x170 [ 88.137637][ T5824] qlist_free_all+0x4d/0x120 [ 88.142204][ T5824] kasan_quarantine_reduce+0x195/0x1e0 [ 88.147638][ T5824] __kasan_slab_alloc+0x69/0x90 [ 88.152467][ T5824] __kmalloc_cache_noprof+0x274/0x780 [ 88.158093][ T5824] ref_tracker_alloc+0x18e/0x5b0 [ 88.163015][ T5824] netdev_queue_update_kobjects+0x2db/0x720 [ 88.168898][ T5824] netdev_register_kobject+0x2b3/0x3d0 [ 88.174349][ T5824] register_netdevice+0x13dc/0x2270 [ 88.179546][ T5824] team_newlink+0xb4/0x190 [ 88.183946][ T5824] rtnl_newlink+0xc45/0x2000 [ 88.188519][ T5824] rtnetlink_rcv_msg+0x95e/0xe90 [ 88.193440][ T5824] netlink_rcv_skb+0x158/0x420 [ 88.198192][ T5824] netlink_unicast+0x5aa/0x870 [ 88.202940][ T5824] netlink_sendmsg+0x8c8/0xdd0 [ 88.207693][ T5824] [ 88.209997][ T5824] Memory state around the buggy address: [ 88.215603][ T5824] ffff88802539e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.223640][ T5824] ffff88802539e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.231680][ T5824] >ffff88802539e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.239720][ T5824] ^ [ 88.243759][ T5824] ffff88802539e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.251797][ T5824] ffff88802539e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.259830][ T5824] ================================================================== [ 88.285112][ T5824] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.292327][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 88.301783][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.311833][ T5824] Workqueue: hci3 hci_rx_work [ 88.316516][ T5824] Call Trace: [ 88.319774][ T5824] [ 88.322775][ T5824] dump_stack_lvl+0x3d/0x1f0 [ 88.327375][ T5824] vpanic+0x640/0x6f0 [ 88.331358][ T5824] panic+0xca/0xd0 [ 88.335067][ T5824] ? __pfx_panic+0x10/0x10 [ 88.339471][ T5824] ? l2cap_connect_cfm+0xdb9/0xf80 [ 88.344567][ T5824] ? preempt_schedule_common+0x44/0xc0 [ 88.350018][ T5824] ? preempt_schedule_thunk+0x16/0x30 [ 88.355381][ T5824] check_panic_on_warn+0xab/0xb0 [ 88.360316][ T5824] end_report+0x107/0x170 [ 88.364649][ T5824] kasan_report+0xee/0x110 [ 88.369057][ T5824] ? l2cap_connect_cfm+0xdb9/0xf80 [ 88.374160][ T5824] l2cap_connect_cfm+0xdb9/0xf80 [ 88.379088][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 88.384538][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 88.389987][ T5824] le_conn_complete_evt+0x1ba6/0x2150 [ 88.395349][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.401053][ T5824] ? hci_event_packet+0x459/0x11c0 [ 88.406156][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 88.411689][ T5824] hci_le_meta_evt+0x357/0x5e0 [ 88.416442][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 88.422501][ T5824] hci_event_packet+0x685/0x11c0 [ 88.427427][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.432699][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 88.438064][ T5824] ? kcov_remote_start+0x3c9/0x6d0 [ 88.443158][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.448350][ T5824] hci_rx_work+0x2c5/0x16b0 [ 88.452843][ T5824] ? rcu_is_watching+0x12/0xc0 [ 88.457594][ T5824] process_one_work+0x9cf/0x1b70 [ 88.462523][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 88.467880][ T5824] ? assign_work+0x1a0/0x250 [ 88.472454][ T5824] worker_thread+0x6c8/0xf10 [ 88.477031][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 88.482122][ T5824] kthread+0x3c5/0x780 [ 88.486184][ T5824] ? __pfx_kthread+0x10/0x10 [ 88.490769][ T5824] ? rcu_is_watching+0x12/0xc0 [ 88.495526][ T5824] ? __pfx_kthread+0x10/0x10 [ 88.500103][ T5824] ret_from_fork+0x675/0x7d0 [ 88.504675][ T5824] ? __pfx_kthread+0x10/0x10 [ 88.509244][ T5824] ret_from_fork_asm+0x1a/0x30 [ 88.514006][ T5824] [ 88.517128][ T5824] Kernel Offset: disabled [ 88.521429][ T5824] Rebooting in 86400 seconds..