last executing test programs: 5.980064225s ago: executing program 2 (id=44): r0 = socket(0x2b, 0x1, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x50) 5.918211842s ago: executing program 2 (id=45): socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x1, @mcast1, 0x1}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.840084028s ago: executing program 2 (id=46): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x8, 0x4, 0x5, 0x1, @time={0xfc, 0xc}, {0x1, 0xdc}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x3, 0x5, 0xff, 0x0, @time={0x28d5, 0x40}, {0x1}, {0x9, 0x81}, @time=@tick=0x5}], 0x38) 4.898478072s ago: executing program 2 (id=50): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat(0xffffffffffffff9c, 0x0, 0x153042, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001c0000000000000018000000180000e1ffffffffffff0b020000000000000000009473fa68b8ecfac55f00"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000c000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x1000000d, {{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e20, 0x0, @mcast2}}}, 0x108) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0/../file0\x00', r8, r9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 3.979919219s ago: executing program 1 (id=67): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) pipe2$watch_queue(0x0, 0x80) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) semtimedop(0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(0xffffffffffffffff, &(0x7f0000000040)="41a9e63b5062", 0x6, 0x4080, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.979726524s ago: executing program 2 (id=68): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2416, 0x9a41, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.980512847s ago: executing program 1 (id=70): syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x8400) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) 1.764802509s ago: executing program 1 (id=81): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080), 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) 1.764678654s ago: executing program 0 (id=82): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 1.762398385s ago: executing program 0 (id=84): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 1.762013334s ago: executing program 3 (id=85): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 1.638964587s ago: executing program 0 (id=86): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2040) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) 1.638783035s ago: executing program 3 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x303}, "ce8d1c91499b74be", "050176e0dda87463d0c67a9e6d510c94", "77cd9195", "aaec637dc558c1e8"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="478c18eb0a51631b3ff7cf4a9ce3a65c69c7cc614964996cbca84d8d9818d829cc74877aeb2f3a202d988e3afca44b26fa582c7b41043d14f8d9398dd6763517d07f247349c5bf8a181d5b38e771ae9fd7e73661f40262f8824f822e8e257a8310e374cd863ecab897b80047d38ba37a9499fc7d471bba5485e0a78983f4b559d1f420b8d88dd971a792643577d5a9534bf0789c4cb2a11959c8c024df5e0d43c8a3762e47baae307dcbffba58faa323e16ddb4851aa7d0b5ffab9220fb408a8a9d56683bdb989ae32fda13ac5c17d992fb8a60e7d9e22c3e3768e87b3d36465984d2d15ab31ae39a5bd06f04cbb951357bfd3f80b73ab1d925c", 0xfa}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0xb) 1.634137303s ago: executing program 3 (id=88): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) shutdown(0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 1.530193856s ago: executing program 0 (id=89): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, 0x0, 0x6) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="ac", 0x1}], 0x1}}], 0x1, 0x840) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x20022, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 930.205447ms ago: executing program 1 (id=90): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 930.004862ms ago: executing program 0 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) 870.552782ms ago: executing program 0 (id=92): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4040) 870.351389ms ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) futex(0x0, 0x8, 0x2, 0x0, &(0x7f0000000580), 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 220.360136ms ago: executing program 3 (id=94): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) listen(r0, 0xfffffffd) 109.434877ms ago: executing program 3 (id=95): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x2, 0x1, [0x8]}, 0xa) 109.220476ms ago: executing program 2 (id=96): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 1.099301ms ago: executing program 3 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000180)={{&(0x7f00000000c0)={'GENERAL\x00'}}, 0x4}) 0s ago: executing program 1 (id=98): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) getsockopt(r0, 0xfff, 0x8, 0x0, &(0x7f00000001c0)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=99): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x801) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000000)={0xe5, 0x10007a}, 0x20) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x3, 0x4, 0xfffffc00, 0xedc5, 0xfffffffc, 0x4, 0x7, 0x1, 0x6, 0x200060, 0x1, 0x8, 0x2, 0x6, 0x8, 0x1, 0x5, 0x43, 0x547, 0x89, 0x10c, 0x4, 0x4, 0xd, 0x8, 0x5, 0x6, 0x8, 0xbf, 0xffffffb4]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0xfffffffffffffffe, 0x0, 0x9}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_open_pts(r3, 0xc0000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x12) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x5003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0xe0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xb3, 0x8, 0x1, {0x7, 0x25, 0x1, 0x0, 0xb, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf1, 0x4, 0x0, {0x7, 0x25, 0x1, 0xc, 0x91, 0x6}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): [ 43.211965][ T40] audit: type=1400 audit(1775712397.998:61): avc: denied { siginh } for pid=5835 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:39147' (ED25519) to the list of known hosts. [ 45.206535][ T40] audit: type=1400 audit(1775712400.008:62): avc: denied { name_bind } for pid=5842 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.252973][ T40] audit: type=1400 audit(1775712400.058:63): avc: denied { execute } for pid=5843 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.261179][ T40] audit: type=1400 audit(1775712400.058:64): avc: denied { execute_no_trans } for pid=5843 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.683620][ T40] audit: type=1400 audit(1775712402.488:65): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.696162][ T5843] cgroup: Unknown subsys name 'net' [ 47.699547][ T40] audit: type=1400 audit(1775712402.498:66): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.903636][ T5843] cgroup: Unknown subsys name 'cpuset' [ 47.910389][ T5843] cgroup: Unknown subsys name 'rlimit' [ 48.186116][ T5894] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 48.190929][ T40] kauditd_printk_skb: 14 callbacks suppressed Setting up swapspace version 1, size = 127995904 bytes [ 48.190948][ T40] audit: type=1400 audit(1775712402.988:81): avc: denied { relabelto } for pid=5894 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.205478][ T40] audit: type=1400 audit(1775712402.998:82): avc: denied { write } for pid=5894 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.214300][ T40] audit: type=1400 audit(1775712402.998:83): avc: denied { read } for pid=5843 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.222751][ T40] audit: type=1400 audit(1775712402.998:84): avc: denied { open } for pid=5843 comm="syz-executor" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.074228][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.579951][ T40] audit: type=1400 audit(1775712407.378:85): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.763627][ T40] audit: type=1400 audit(1775712407.568:86): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.769767][ T40] audit: type=1400 audit(1775712407.568:87): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.784828][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.791017][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.793036][ T40] audit: type=1400 audit(1775712407.568:88): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.794145][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.801682][ T40] audit: type=1400 audit(1775712407.568:89): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[6591]" dev="sockfs" ino=6591 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.804919][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.815528][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.818177][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.828078][ T40] audit: type=1400 audit(1775712407.628:90): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.842738][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.845482][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.845503][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.849751][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.851198][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.860274][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.860917][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.866737][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.871850][ T5933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.875550][ T5933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.884057][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.888396][ T5291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.893303][ T5291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.899323][ T5291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.107056][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 53.160308][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.175975][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 53.211022][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 53.284063][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.286417][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.288701][ T5931] bridge_slave_0: entered allmulticast mode [ 53.292446][ T5931] bridge_slave_0: entered promiscuous mode [ 53.296852][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.299152][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.302618][ T5931] bridge_slave_1: entered allmulticast mode [ 53.306549][ T5931] bridge_slave_1: entered promiscuous mode [ 53.378839][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.381487][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.384576][ T5934] bridge_slave_0: entered allmulticast mode [ 53.388101][ T5934] bridge_slave_0: entered promiscuous mode [ 53.401360][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.417359][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.419701][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.422427][ T5934] bridge_slave_1: entered allmulticast mode [ 53.425395][ T5934] bridge_slave_1: entered promiscuous mode [ 53.429239][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.444603][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.446947][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.449244][ T5938] bridge_slave_0: entered allmulticast mode [ 53.452499][ T5938] bridge_slave_0: entered promiscuous mode [ 53.456802][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.459040][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.461637][ T5938] bridge_slave_1: entered allmulticast mode [ 53.464381][ T5938] bridge_slave_1: entered promiscuous mode [ 53.473044][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.475406][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.478221][ T5942] bridge_slave_0: entered allmulticast mode [ 53.481022][ T5942] bridge_slave_0: entered promiscuous mode [ 53.492475][ T5931] team0: Port device team_slave_0 added [ 53.497213][ T5931] team0: Port device team_slave_1 added [ 53.541374][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.543831][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.546515][ T5942] bridge_slave_1: entered allmulticast mode [ 53.549303][ T5942] bridge_slave_1: entered promiscuous mode [ 53.565867][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.569255][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.571838][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.579570][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.585563][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.589992][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.593871][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.596816][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.599061][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.607329][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.612298][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.617112][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.663281][ T5934] team0: Port device team_slave_0 added [ 53.672440][ T5934] team0: Port device team_slave_1 added [ 53.696128][ T5938] team0: Port device team_slave_0 added [ 53.705962][ T5938] team0: Port device team_slave_1 added [ 53.709088][ T5942] team0: Port device team_slave_0 added [ 53.715571][ T5931] hsr_slave_0: entered promiscuous mode [ 53.718258][ T5931] hsr_slave_1: entered promiscuous mode [ 53.733084][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.735352][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.743980][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.748755][ T5942] team0: Port device team_slave_1 added [ 53.764726][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.766957][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.775711][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.808069][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.810427][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.818625][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.828982][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.831283][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.839357][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.856727][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.859693][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.870664][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.882063][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.884905][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.895511][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.921944][ T5934] hsr_slave_0: entered promiscuous mode [ 53.924264][ T5934] hsr_slave_1: entered promiscuous mode [ 53.926386][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 53.928228][ T5934] Cannot create hsr debugfs directory [ 53.971823][ T5938] hsr_slave_0: entered promiscuous mode [ 53.974923][ T5938] hsr_slave_1: entered promiscuous mode [ 53.977707][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 53.979659][ T5938] Cannot create hsr debugfs directory [ 54.038112][ T5942] hsr_slave_0: entered promiscuous mode [ 54.040529][ T5942] hsr_slave_1: entered promiscuous mode [ 54.042747][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 54.044580][ T5942] Cannot create hsr debugfs directory [ 54.258606][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.264711][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.273752][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.278581][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.316307][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.322191][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.326229][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.333663][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.400367][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.409073][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.415539][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.441439][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.485385][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.496715][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.501717][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.506520][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.511947][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.541263][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.556064][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.562319][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.564711][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.587527][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.590063][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.604291][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.616428][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.635449][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.637750][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.647428][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.649694][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.657437][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.669512][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.672514][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.697400][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.699740][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.706482][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 54.712221][ T40] audit: type=1400 audit(1775712409.508:94): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.757564][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.784247][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.793905][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.797810][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.800145][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.805056][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.808126][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.844943][ T63] Bluetooth: hci0: command tx timeout [ 54.866836][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.879891][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.883460][ T5931] veth0_vlan: entered promiscuous mode [ 54.899807][ T5931] veth1_vlan: entered promiscuous mode [ 54.910016][ T63] Bluetooth: hci2: command tx timeout [ 54.910075][ T5291] Bluetooth: hci3: command tx timeout [ 54.910645][ T5940] Bluetooth: hci1: command tx timeout [ 54.924704][ T5938] veth0_vlan: entered promiscuous mode [ 54.941073][ T5942] veth0_vlan: entered promiscuous mode [ 54.943743][ T5938] veth1_vlan: entered promiscuous mode [ 54.959629][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.965767][ T5942] veth1_vlan: entered promiscuous mode [ 54.974143][ T5931] veth0_macvtap: entered promiscuous mode [ 54.985814][ T5931] veth1_macvtap: entered promiscuous mode [ 54.997558][ T5938] veth0_macvtap: entered promiscuous mode [ 55.002571][ T5938] veth1_macvtap: entered promiscuous mode [ 55.016304][ T5942] veth0_macvtap: entered promiscuous mode [ 55.024666][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.029400][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.033658][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.036929][ T5942] veth1_macvtap: entered promiscuous mode [ 55.055599][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.058370][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062182][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.065004][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.067774][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.087906][ T5934] veth0_vlan: entered promiscuous mode [ 55.092718][ T320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.095478][ T320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.105824][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.108490][ T320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.111703][ T320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.123598][ T5934] veth1_vlan: entered promiscuous mode [ 55.141801][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.163114][ T90] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.163627][ T320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.167415][ T90] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.169919][ T320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.189992][ T90] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.193773][ T90] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.208536][ T5934] veth0_macvtap: entered promiscuous mode [ 55.229289][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.232677][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.234768][ T5934] veth1_macvtap: entered promiscuous mode [ 55.238655][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.246737][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.253939][ T40] audit: type=1400 audit(1775712410.058:95): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.268261][ T40] audit: type=1400 audit(1775712410.058:96): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzkaller.hdFYaC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.279661][ T40] audit: type=1400 audit(1775712410.058:97): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.288165][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.289075][ T40] audit: type=1400 audit(1775712410.058:98): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzkaller.hdFYaC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.302053][ T40] audit: type=1400 audit(1775712410.058:99): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzkaller.hdFYaC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.302987][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.315283][ T40] audit: type=1400 audit(1775712410.058:100): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.324046][ T320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.326540][ T320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.327807][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.327846][ T40] audit: type=1400 audit(1775712410.068:101): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.327890][ T40] audit: type=1400 audit(1775712410.068:102): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="gadgetfs" ino=8675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 55.327928][ T40] audit: type=1400 audit(1775712410.068:103): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.328958][ T1258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.358744][ T1258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.373242][ T1258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.379520][ T1258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.413068][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.415930][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.445831][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.448357][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.472122][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.474699][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.505922][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.509732][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.518584][ T9] IPVS: starting estimator thread 0... [ 55.547678][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.658330][ T6024] IPVS: using max 44 ests per chain, 105600 per kthread [ 55.677033][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 55.680315][ T6032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 55.691213][ T6032] tmpfs: Bad value for 'gid' [ 55.692833][ T6032] tmpfs: Bad value for 'gid' [ 55.764719][ T6032] 9pnet_virtio: no channels available for device syz ðÿ”ðÿÿ ÿÔ< €ÿÿÿÿ  MQ'#%}(%([/-ÿ7¦ÿÿÿÿÿÿ'ÿ@ÿîÿÿÿÿÁ‡L ÿ  úÿÿÿÿÿÿÿ€ÿÿÿÿ¬ ñÿ  @(&-[ 56.022908][ T6056] xt_l2tp: v2 doesn't support IP mode [ 56.203399][ T6072] Zero length message leads to an empty skb [ 56.664574][ T6089] syzkaller0: entered promiscuous mode [ 56.666508][ T6089] syzkaller0: entered allmulticast mode [ 56.911500][ T63] Bluetooth: hci0: command tx timeout [ 56.991168][ T63] Bluetooth: hci1: command tx timeout [ 56.993949][ T63] Bluetooth: hci3: command tx timeout [ 56.996857][ T63] Bluetooth: hci2: command tx timeout [ 57.288798][ T6112] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 58.179965][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.341904][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 58.347574][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 58.357157][ T50] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 58.360637][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.363434][ T50] usb 8-1: Product: syz [ 58.370000][ T50] usb 8-1: Manufacturer: syz [ 58.371830][ T50] usb 8-1: SerialNumber: syz [ 58.381391][ T50] usb 8-1: config 0 descriptor?? [ 58.392337][ T50] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 58.396312][ T50] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 58.510752][ T5291] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 58.991666][ T5291] Bluetooth: hci0: command tx timeout [ 58.997738][ T50] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 59.070283][ T5291] Bluetooth: hci2: command tx timeout [ 59.072778][ T5940] Bluetooth: hci3: command tx timeout [ 59.075193][ T63] Bluetooth: hci1: command 0x040f tx timeout [ 59.151906][ T6149] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 59.151906][ T6149] program syz.2.46 not setting count and/or reply_len properly [ 59.742498][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.938133][ T50] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.941829][ T50] em28xx 8-1:0.0: board has no eeprom [ 59.958076][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 59.958088][ T40] audit: type=1400 audit(1775712414.758:352): avc: denied { append } for pid=6159 comm="syz.1.47" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.280018][ T50] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 60.282693][ T50] em28xx 8-1:0.0: dvb set to bulk mode. [ 60.285931][ T5302] em28xx 8-1:0.0: Binding DVB extension [ 60.399432][ T6170] comedi comedi0: dt2814: I/O port conflict (0x3,2) [ 60.505796][ T40] audit: type=1400 audit(1775712415.308:353): avc: denied { write } for pid=6175 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.511917][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 60.551488][ T6178] comedi comedi0: comedi_bond: 3:2 3:3 attached, 16 channels from 2 devices [ 60.655674][ T40] audit: type=1400 audit(1775712415.458:354): avc: denied { ioctl } for pid=6181 comm="syz.1.58" path="cgroup:[4026533024]" dev="nsfs" ino=4026533024 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.737191][ T40] audit: type=1400 audit(1775712415.538:355): avc: denied { execute } for pid=6186 comm="syz.0.60" name="file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.737492][ T6187] process 'syz.0.60' launched './file0' with NULL argv: empty string added [ 60.748275][ T40] audit: type=1400 audit(1775712415.558:356): avc: denied { execute_no_trans } for pid=6186 comm="syz.0.60" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.768274][ T40] audit: type=1400 audit(1775712415.568:357): avc: denied { create } for pid=6181 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 60.824081][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 60.872002][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 61.049153][ T40] audit: type=1400 audit(1775712415.848:358): avc: denied { write } for pid=6202 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.070012][ T5940] Bluetooth: hci0: command tx timeout [ 61.150314][ T5291] Bluetooth: hci2: command tx timeout [ 61.150945][ T40] audit: type=1400 audit(1775712415.898:359): avc: denied { create } for pid=6200 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.152416][ T63] Bluetooth: hci1: command 0x040f tx timeout [ 61.154292][ T5940] Bluetooth: hci3: command tx timeout [ 61.159187][ T40] audit: type=1400 audit(1775712415.908:360): avc: denied { setopt } for pid=6200 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.168856][ T40] audit: type=1400 audit(1775712415.908:361): avc: denied { bind } for pid=6200 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.472040][ T6124] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 61.489325][ T50] usb 8-1: USB disconnect, device number 2 [ 61.502742][ T50] em28xx 8-1:0.0: Disconnecting em28xx [ 61.583718][ T5302] em28xx 8-1:0.0: Registering input extension [ 61.586603][ T50] em28xx 8-1:0.0: Closing input extension [ 61.627689][ T50] em28xx 8-1:0.0: Freeing device [ 61.720794][ T841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.880441][ T841] usb 7-1: Using ep0 maxpacket: 16 [ 61.883590][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.892908][ T841] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.895864][ T841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.907874][ T841] usb 7-1: Product: syz [ 61.909287][ T841] usb 7-1: Manufacturer: syz [ 61.913075][ T841] usb 7-1: SerialNumber: syz [ 61.918435][ T841] usb 7-1: config 0 descriptor?? [ 61.926734][ T841] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.929749][ T841] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 61.961852][ T6213] pimreg: entered allmulticast mode [ 62.099187][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 62.141162][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.290132][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 62.293903][ T50] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 62.296583][ T50] usb 6-1: config 0 has no interface number 1 [ 62.298585][ T50] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 62.302395][ T50] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 62.307981][ T50] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 62.310960][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.313508][ T50] usb 6-1: Product: syz [ 62.314865][ T50] usb 6-1: Manufacturer: syz [ 62.316327][ T50] usb 6-1: SerialNumber: syz [ 62.319504][ T50] usb 6-1: config 0 descriptor?? [ 62.325255][ T50] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 62.533613][ T2490] pvrusb2: Invalid read control endpoint [ 62.540260][ T841] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 62.543966][ T50] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 62.547280][ T2490] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 62.548944][ T50] usb 6-1: USB disconnect, device number 2 [ 62.554134][ T2490] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 63.029430][ T841] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 63.032122][ T841] em28xx 7-1:0.0: board has no eeprom [ 63.103331][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.240123][ T5940] Bluetooth: hci1: command 0x040f tx timeout [ 63.267149][ T6260] capability: warning: `syz.1.81' uses deprecated v2 capabilities in a way that may be insecure [ 63.480022][ T5302] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.631976][ T5302] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.635007][ T5302] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 63.638536][ T5302] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.642031][ T5302] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 63.646075][ T5302] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 63.652139][ T5302] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.655416][ T5302] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.658444][ T5302] usb 8-1: Product: syz [ 63.660109][ T5302] usb 8-1: Manufacturer: syz [ 63.677195][ T5302] cdc_wdm 8-1:1.0: skipping garbage [ 63.679344][ T5302] cdc_wdm 8-1:1.0: skipping garbage [ 63.686573][ T5302] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 63.688703][ T5302] cdc_wdm 8-1:1.0: Unknown control protocol [ 63.759957][ T841] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 63.762587][ T841] em28xx 7-1:0.0: dvb set to bulk mode. [ 63.766389][ T5977] em28xx 7-1:0.0: Binding DVB extension [ 63.936002][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 64.144317][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 64.144788][ T841] usb 8-1: USB disconnect, device number 3 [ 64.146484][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 64.150392][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 64.751237][ T6204] em28xx 7-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 64.765225][ T54] usb 7-1: USB disconnect, device number 2 [ 64.771011][ T54] em28xx 7-1:0.0: Disconnecting em28xx [ 64.775088][ T5977] em28xx 7-1:0.0: Registering input extension [ 64.777587][ T54] em28xx 7-1:0.0: Closing input extension [ 64.796082][ T54] em28xx 7-1:0.0: Freeing device [ 64.985421][ T6296] QAT: Device 4 not found [ 65.008480][ T6299] [ 65.009330][ T6299] ============================================ [ 65.011330][ T6299] WARNING: possible recursive locking detected [ 65.013329][ T6299] syzkaller #0 Tainted: G L [ 65.015421][ T6299] -------------------------------------------- [ 65.017364][ T6299] syz.0.99/6299 is trying to acquire lock: [ 65.019212][ T6299] ffff888034de38f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 65.022062][ T6299] [ 65.022062][ T6299] but task is already holding lock: [ 65.024395][ T6299] ffff888034de50f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 65.027448][ T6299] [ 65.027448][ T6299] other info that might help us debug this: [ 65.029984][ T6299] Possible unsafe locking scenario: [ 65.029984][ T6299] [ 65.032386][ T6299] CPU0 [ 65.033461][ T6299] ---- [ 65.034548][ T6299] lock(&dev->mutex#4); [ 65.035907][ T6299] lock(&dev->mutex#4); [ 65.037262][ T6299] [ 65.037262][ T6299] *** DEADLOCK *** [ 65.037262][ T6299] [ 65.039930][ T6299] May be due to missing lock nesting notation [ 65.039930][ T6299] [ 65.042585][ T6299] 1 lock held by syz.0.99/6299: [ 65.044163][ T6299] #0: ffff888034de50f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 65.047378][ T6299] [ 65.047378][ T6299] stack backtrace: [ 65.049266][ T6299] CPU: 3 UID: 0 PID: 6299 Comm: syz.0.99 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.049288][ T6299] Tainted: [L]=SOFTLOCKUP [ 65.049292][ T6299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.049300][ T6299] Call Trace: [ 65.049306][ T6299] [ 65.049313][ T6299] dump_stack_lvl+0x100/0x190 [ 65.049335][ T6299] print_deadlock_bug.cold+0xbd/0xca [ 65.049358][ T6299] __lock_acquire+0x12bb/0x2630 [ 65.049373][ T6299] lock_acquire+0x1cf/0x380 [ 65.049382][ T6299] ? comedi_do_insn+0x2e/0x360 [ 65.049393][ T6299] ? __pfx___might_resched+0x10/0x10 [ 65.049411][ T6299] __mutex_lock+0x1a2/0x1b90 [ 65.049423][ T6299] ? comedi_do_insn+0x2e/0x360 [ 65.049433][ T6299] ? comedi_do_insn+0x2e/0x360 [ 65.049443][ T6299] ? __pfx___mutex_lock+0x10/0x10 [ 65.049456][ T6299] ? __pfx___might_resched+0x10/0x10 [ 65.049472][ T6299] ? __up_read+0x2c5/0x700 [ 65.049487][ T6299] ? comedi_do_insn+0x2e/0x360 [ 65.049495][ T6299] comedi_do_insn+0x2e/0x360 [ 65.049506][ T6299] comedi_dio_bitfield2+0x3c0/0x420 [ 65.049516][ T6299] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 65.049528][ T6299] ? __kernel_text_address+0xd/0x30 [ 65.049542][ T6299] ? arch_stack_walk+0xa6/0xf0 [ 65.049558][ T6299] bonding_dio_insn_bits+0x2b9/0x570 [ 65.049571][ T6299] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 65.049585][ T6299] ? __lock_acquire+0x4a5/0x2630 [ 65.049595][ T6299] insn_rw_emulate_bits+0x2a2/0x5e0 [ 65.049611][ T6299] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 65.049627][ T6299] ? rcu_read_unlock+0x17/0x60 [ 65.049639][ T6299] ? comedi_check_chanlist+0x27e/0x300 [ 65.049654][ T6299] parse_insn+0x83f/0x19f0 [ 65.049666][ T6299] ? trace_kmalloc+0x101/0x130 [ 65.049677][ T6299] ? __pfx_parse_insn+0x10/0x10 [ 65.049688][ T6299] ? __kmalloc_noprof+0x320/0x850 [ 65.049704][ T6299] do_insn_ioctl+0x152/0x4e0 [ 65.049717][ T6299] comedi_unlocked_ioctl+0xf68/0x3310 [ 65.049731][ T6299] ? tomoyo_path_number_perm+0x188/0x580 [ 65.049746][ T6299] ? futex_wait+0x125/0x380 [ 65.049760][ T6299] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.049774][ T6299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.049791][ T6299] ? do_vfs_ioctl+0x226/0x13e0 [ 65.049807][ T6299] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.049823][ T6299] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.049845][ T6299] ? __fget_files+0x215/0x3d0 [ 65.049857][ T6299] ? hook_file_ioctl_common+0x146/0x410 [ 65.049871][ T6299] ? selinux_file_ioctl+0x139/0x290 [ 65.049886][ T6299] ? selinux_file_ioctl+0xb4/0x290 [ 65.049904][ T6299] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.049917][ T6299] __x64_sys_ioctl+0x18e/0x210 [ 65.049933][ T6299] do_syscall_64+0x106/0xf80 [ 65.049944][ T6299] ? clear_bhb_loop+0x40/0x90 [ 65.049957][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.049968][ T6299] RIP: 0033:0x7f469059c819 [ 65.050004][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.050016][ T6299] RSP: 002b:00007f46914e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.050030][ T6299] RAX: ffffffffffffffda RBX: 00007f4690815fa0 RCX: 00007f469059c819 [ 65.050037][ T6299] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 65.050045][ T6299] RBP: 00007f4690632c91 R08: 0000000000000000 R09: 0000000000000000 [ 65.050053][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.050060][ T6299] R13: 00007f4690816038 R14: 00007f4690815fa0 R15: 00007ffeafa9f1e8 [ 65.050072][ T6299] [ 65.295002][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 65.295069][ T40] audit: type=1400 audit(1775712420.098:399): avc: denied { create } for pid=6300 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.304809][ T40] audit: type=1400 audit(1775712420.098:400): avc: denied { getopt } for pid=6300 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.489952][ T5302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.652664][ T5302] usb 5-1: Using ep0 maxpacket: 16 [ 65.671114][ T5302] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 179, changing to 7 [ 65.674600][ T5302] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 65.679814][ T5302] usb 5-1: New USB device found, idVendor=0499, idProduct=5003, bcdDevice= 0.40 [ 65.682760][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.685269][ T5302] usb 5-1: Product: syz [ 65.686639][ T5302] usb 5-1: Manufacturer: syz [ 65.688112][ T5302] usb 5-1: SerialNumber: syz [ 70.754664][ T5302] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.757484][ T5302] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 70.762310][ T5302] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.764868][ T5302] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 70.769395][ T5302] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.780414][ T5302] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 70.803554][ T6259] udevd[6259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.420683][ T6157] usb 5-1: USB disconnect, device number 2