last executing test programs: 10.96368412s ago: executing program 3 (id=117): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x9b, 0xde, 0x52, 0x10, 0x3923, 0x718a, 0xd8d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0x7b, 0x7, 0x2, 0x2d, 0x51, 0xd5, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x20, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x12, 0x3ff, 0x8, 0x9, 0x23}}]}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)="b9") syz_open_dev$evdev(0x0, 0x0, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "cfe092"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 8.892203362s ago: executing program 3 (id=141): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x10) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x80000002, 0x100009}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xe) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7fff, 0x0, 0xfc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000"], 0x0) 8.884887606s ago: executing program 2 (id=142): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x8000000002) 8.611821567s ago: executing program 2 (id=143): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.627541253s ago: executing program 2 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={0x0, 0x16c}}, 0x4004050) r4 = io_uring_setup(0x4759, &(0x7f00000004c0)={0x0, 0x4, 0x1000, 0x3, 0x201}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 7.537858901s ago: executing program 3 (id=147): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x100000019) fcntl$notify(r0, 0x402, 0x3f) 7.535617073s ago: executing program 1 (id=148): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 7.131486986s ago: executing program 3 (id=151): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x9b, 0xde, 0x52, 0x10, 0x3923, 0x718a, 0xd8d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0x7b, 0x7, 0x2, 0x2d, 0x51, 0xd5, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x20, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x12, 0x3ff, 0x8, 0x9, 0x23}}]}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)="b9") syz_open_dev$evdev(0x0, 0x0, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "cfe092"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 6.94088319s ago: executing program 1 (id=153): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2201, 0x0) 6.527807245s ago: executing program 1 (id=157): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}, 0x3e8) 6.366233884s ago: executing program 4 (id=158): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000002c116739dc583ea4ae6cf5ad"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 6.175255731s ago: executing program 1 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 6.08137773s ago: executing program 4 (id=162): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x5c, r2, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) 5.100031048s ago: executing program 0 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 5.020069399s ago: executing program 4 (id=165): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@hopopts]}}}}}}}, 0x0) 4.895763174s ago: executing program 1 (id=166): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="90030ec29a"], 0x120) 4.753829208s ago: executing program 0 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.697302726s ago: executing program 4 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 4.573144176s ago: executing program 0 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmdt(0x0) 4.47159825s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 4.377656842s ago: executing program 4 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 4.337099663s ago: executing program 0 (id=172): syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 4.126846345s ago: executing program 0 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_INFO={0x18, 0x3, "efabfef1f427091b884e3262c1fa7a2243803b7d"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 4.12625382s ago: executing program 4 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x8000) 4.027500741s ago: executing program 2 (id=175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce0001"], 0x114}}, 0x0) 3.988214829s ago: executing program 3 (id=176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0) 3.960218826s ago: executing program 0 (id=177): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 3.614763212s ago: executing program 2 (id=178): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x4b6a, &(0x7f0000000340)={0x200c, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) 3.614480483s ago: executing program 3 (id=179): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000011b00)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0) 0s ago: executing program 2 (id=180): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.254' (ED25519) to the list of known hosts. [ 81.264173][ T29] audit: type=1400 audit(1726234363.983:88): avc: denied { mounton } for pid=5213 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 81.272077][ T5213] cgroup: Unknown subsys name 'net' [ 81.287204][ T29] audit: type=1400 audit(1726234363.983:89): avc: denied { mount } for pid=5213 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.314577][ T29] audit: type=1400 audit(1726234364.013:90): avc: denied { unmount } for pid=5213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.442941][ T5213] cgroup: Unknown subsys name 'rlimit' [ 81.592161][ T29] audit: type=1400 audit(1726234364.303:91): avc: denied { setattr } for pid=5213 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.620310][ T29] audit: type=1400 audit(1726234364.303:92): avc: denied { create } for pid=5213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.662718][ T29] audit: type=1400 audit(1726234364.303:93): avc: denied { write } for pid=5213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.687022][ T29] audit: type=1400 audit(1726234364.303:94): avc: denied { read } for pid=5213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.707788][ T29] audit: type=1400 audit(1726234364.333:95): avc: denied { mounton } for pid=5213 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 81.728199][ T5216] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 81.733437][ T29] audit: type=1400 audit(1726234364.333:96): avc: denied { mount } for pid=5213 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 81.764873][ T29] audit: type=1400 audit(1726234364.363:97): avc: denied { read } for pid=4891 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.119804][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.082790][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 87.082809][ T29] audit: type=1400 audit(1726234369.793:103): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 87.142803][ T29] audit: type=1400 audit(1726234369.793:104): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.167485][ T29] audit: type=1400 audit(1726234369.793:105): avc: denied { create } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.249005][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.283437][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.290442][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.298628][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.314966][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.315377][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.329191][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.341841][ T29] audit: type=1400 audit(1726234369.793:106): avc: denied { read write } for pid=5223 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.342279][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.376050][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.384123][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.390394][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.393985][ T29] audit: type=1400 audit(1726234369.793:107): avc: denied { open } for pid=5223 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.403676][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.431077][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.439394][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.448162][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.453359][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.455831][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.470088][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.471777][ T29] audit: type=1400 audit(1726234369.853:108): avc: denied { ioctl } for pid=5223 comm="syz-executor" path="socket:[3065]" dev="sockfs" ino=3065 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.478460][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.504274][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.518542][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.519982][ T4615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.526886][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.565417][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.567437][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.572881][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.580363][ T4615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.588618][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.602060][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.602230][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.654497][ T29] audit: type=1400 audit(1726234370.243:109): avc: denied { read } for pid=5223 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.677459][ T29] audit: type=1400 audit(1726234370.243:110): avc: denied { open } for pid=5223 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.722458][ T29] audit: type=1400 audit(1726234370.263:111): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 88.386301][ T29] audit: type=1400 audit(1726234371.103:112): avc: denied { module_request } for pid=5224 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 88.545063][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 88.588188][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 88.690656][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 88.701957][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 88.739766][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 88.984977][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.994932][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.002247][ T5224] bridge_slave_0: entered allmulticast mode [ 89.009931][ T5224] bridge_slave_0: entered promiscuous mode [ 89.019387][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.026678][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.033948][ T5228] bridge_slave_0: entered allmulticast mode [ 89.040966][ T5228] bridge_slave_0: entered promiscuous mode [ 89.055814][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.063036][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.070199][ T5228] bridge_slave_1: entered allmulticast mode [ 89.078728][ T5228] bridge_slave_1: entered promiscuous mode [ 89.106179][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.113342][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.120455][ T5233] bridge_slave_0: entered allmulticast mode [ 89.128897][ T5233] bridge_slave_0: entered promiscuous mode [ 89.138191][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.146110][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.153650][ T5224] bridge_slave_1: entered allmulticast mode [ 89.160916][ T5224] bridge_slave_1: entered promiscuous mode [ 89.227822][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.235395][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.244860][ T5233] bridge_slave_1: entered allmulticast mode [ 89.251872][ T5233] bridge_slave_1: entered promiscuous mode [ 89.289121][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.304380][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.358962][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.366535][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.374609][ T5225] bridge_slave_0: entered allmulticast mode [ 89.381947][ T5225] bridge_slave_0: entered promiscuous mode [ 89.394131][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.401307][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.409110][ T5225] bridge_slave_1: entered allmulticast mode [ 89.417148][ T5225] bridge_slave_1: entered promiscuous mode [ 89.436102][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.443963][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.451133][ T5223] bridge_slave_0: entered allmulticast mode [ 89.459143][ T5223] bridge_slave_0: entered promiscuous mode [ 89.484992][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.527545][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.534844][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.541970][ T5223] bridge_slave_1: entered allmulticast mode [ 89.550097][ T5223] bridge_slave_1: entered promiscuous mode [ 89.559820][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.573506][ T5236] Bluetooth: hci1: command tx timeout [ 89.577342][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.579158][ T5235] Bluetooth: hci0: command tx timeout [ 89.595476][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.637796][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.652321][ T5228] team0: Port device team_slave_0 added [ 89.663803][ T5235] Bluetooth: hci3: command tx timeout [ 89.663830][ T54] Bluetooth: hci2: command tx timeout [ 89.664161][ T5236] Bluetooth: hci4: command tx timeout [ 89.751862][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.764792][ T5228] team0: Port device team_slave_1 added [ 89.774600][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.788010][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.801143][ T5233] team0: Port device team_slave_0 added [ 89.811296][ T5233] team0: Port device team_slave_1 added [ 89.828367][ T5224] team0: Port device team_slave_0 added [ 89.928848][ T5224] team0: Port device team_slave_1 added [ 89.964374][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.971344][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.001002][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.016039][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.023087][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.052647][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.068721][ T5223] team0: Port device team_slave_0 added [ 90.109556][ T5225] team0: Port device team_slave_0 added [ 90.149177][ T5223] team0: Port device team_slave_1 added [ 90.156153][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.164070][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.190704][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.203092][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.210050][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.236559][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.250405][ T5225] team0: Port device team_slave_1 added [ 90.299440][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.306767][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.332913][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.346473][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.353834][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.380848][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.411003][ T5228] hsr_slave_0: entered promiscuous mode [ 90.417551][ T5228] hsr_slave_1: entered promiscuous mode [ 90.455275][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.462248][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.489505][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.503218][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.510178][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.536176][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.548567][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.555713][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.582015][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.596656][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.603684][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.629842][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.795059][ T5224] hsr_slave_0: entered promiscuous mode [ 90.801590][ T5224] hsr_slave_1: entered promiscuous mode [ 90.809152][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.817544][ T5224] Cannot create hsr debugfs directory [ 90.875850][ T5225] hsr_slave_0: entered promiscuous mode [ 90.883306][ T5225] hsr_slave_1: entered promiscuous mode [ 90.889654][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.897674][ T5225] Cannot create hsr debugfs directory [ 90.910993][ T5233] hsr_slave_0: entered promiscuous mode [ 90.918952][ T5233] hsr_slave_1: entered promiscuous mode [ 90.925741][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.933974][ T5233] Cannot create hsr debugfs directory [ 90.988168][ T5223] hsr_slave_0: entered promiscuous mode [ 90.994749][ T5223] hsr_slave_1: entered promiscuous mode [ 91.000921][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.008568][ T5223] Cannot create hsr debugfs directory [ 91.653073][ T5236] Bluetooth: hci0: command tx timeout [ 91.653425][ T5235] Bluetooth: hci1: command tx timeout [ 91.664526][ T5228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.677066][ T5228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.694962][ T5228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.710021][ T5228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.734058][ T5235] Bluetooth: hci3: command tx timeout [ 91.734085][ T54] Bluetooth: hci2: command tx timeout [ 91.747392][ T5236] Bluetooth: hci4: command tx timeout [ 91.807119][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.850513][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.891307][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.906658][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.966212][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.980729][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.995516][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.008317][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.151711][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.165786][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.191085][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.204265][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.218894][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.380001][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.401382][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.418868][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.426361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.447928][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.455129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.478866][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.491799][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.510067][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.551706][ T940] cfg80211: failed to load regulatory.db [ 92.624885][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.752048][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.777495][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.815567][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.856745][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.864035][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.930423][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.937657][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.955092][ T29] audit: type=1400 audit(1726234375.673:113): avc: denied { sys_module } for pid=5228 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 92.959014][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.999489][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.049788][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.057040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.107757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.114956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.128591][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.135739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.176277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.183505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.291632][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.331819][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.426996][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.519018][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.526388][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.560775][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.580761][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.587970][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.742586][ T54] Bluetooth: hci0: command tx timeout [ 93.742879][ T5236] Bluetooth: hci1: command tx timeout [ 93.815369][ T5236] Bluetooth: hci2: command tx timeout [ 93.817586][ T54] Bluetooth: hci3: command tx timeout [ 93.820802][ T5236] Bluetooth: hci4: command tx timeout [ 93.887088][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.142049][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.206479][ T5233] veth0_vlan: entered promiscuous mode [ 94.247646][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.329303][ T5233] veth1_vlan: entered promiscuous mode [ 94.417332][ T5223] veth0_vlan: entered promiscuous mode [ 94.480906][ T5223] veth1_vlan: entered promiscuous mode [ 94.499351][ T5228] veth0_vlan: entered promiscuous mode [ 94.531098][ T5233] veth0_macvtap: entered promiscuous mode [ 94.557550][ T5224] veth0_vlan: entered promiscuous mode [ 94.579419][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.598305][ T5233] veth1_macvtap: entered promiscuous mode [ 94.611019][ T5228] veth1_vlan: entered promiscuous mode [ 94.635105][ T5224] veth1_vlan: entered promiscuous mode [ 94.705924][ T5223] veth0_macvtap: entered promiscuous mode [ 94.732409][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.759568][ T5223] veth1_macvtap: entered promiscuous mode [ 94.769110][ T5224] veth0_macvtap: entered promiscuous mode [ 94.814109][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.834518][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.843977][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.857176][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.865955][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.877664][ T5224] veth1_macvtap: entered promiscuous mode [ 94.913309][ T5228] veth0_macvtap: entered promiscuous mode [ 94.934070][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.945410][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.957615][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.982306][ T5228] veth1_macvtap: entered promiscuous mode [ 94.991846][ T5225] veth0_vlan: entered promiscuous mode [ 95.006504][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.019016][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.029454][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.040643][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.055300][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.065053][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.077629][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.089798][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.139633][ T5225] veth1_vlan: entered promiscuous mode [ 95.161769][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.172892][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.184392][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.197227][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.209287][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.222330][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234361][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.243319][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252034][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.270095][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.280681][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.290927][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.301533][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.311795][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.325659][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.338280][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.377332][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.389530][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.398621][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.407803][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.422890][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.435903][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.446080][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.456765][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.466674][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.477138][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.490779][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.586622][ T5228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.599075][ T5228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.608139][ T5228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.617018][ T5228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.644062][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.652158][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.779207][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.794984][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.815687][ T5236] Bluetooth: hci1: command tx timeout [ 95.815699][ T54] Bluetooth: hci0: command tx timeout [ 95.837665][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.851763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.871375][ T5225] veth0_macvtap: entered promiscuous mode [ 95.893128][ T5236] Bluetooth: hci4: command tx timeout [ 95.893484][ T54] Bluetooth: hci3: command tx timeout [ 95.898553][ T5236] Bluetooth: hci2: command tx timeout [ 95.915554][ T29] audit: type=1400 audit(1726234378.623:114): avc: denied { mounton } for pid=5233 comm="syz-executor" path="/root/syzkaller.hON8DR/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 95.946733][ T29] audit: type=1400 audit(1726234378.643:115): avc: denied { mount } for pid=5233 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.950893][ T5225] veth1_macvtap: entered promiscuous mode [ 95.969902][ T29] audit: type=1400 audit(1726234378.643:116): avc: denied { mounton } for pid=5233 comm="syz-executor" path="/root/syzkaller.hON8DR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.054755][ T29] audit: type=1400 audit(1726234378.643:117): avc: denied { mount } for pid=5233 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.071559][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.087225][ T29] audit: type=1400 audit(1726234378.653:118): avc: denied { unmount } for pid=5233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.111133][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.116167][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.120173][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.132642][ T29] audit: type=1400 audit(1726234378.723:119): avc: denied { mounton } for pid=5233 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 96.146622][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.166817][ T29] audit: type=1400 audit(1726234378.733:120): avc: denied { mount } for pid=5233 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.171895][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.203179][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.214935][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.226577][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.237836][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.249099][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.291297][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.321599][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.331509][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.362598][ T29] audit: type=1400 audit(1726234379.053:121): avc: denied { read write } for pid=5233 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.387352][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.400738][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.412241][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.422393][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.428701][ T29] audit: type=1400 audit(1726234379.053:122): avc: denied { open } for pid=5233 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.433636][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.471984][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.495495][ T5312] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.534909][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.548080][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.558128][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.565605][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.577880][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.589599][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.768019][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.812238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.876064][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.899241][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.076345][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.100791][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.217983][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.259876][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.453077][ T5318] syzkaller0: entered promiscuous mode [ 97.462305][ T5318] syzkaller0: entered allmulticast mode [ 97.600831][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.632043][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.785343][ T5333] syz.4.5[5333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.785548][ T5333] syz.4.5[5333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.844916][ T5334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.001030][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 98.001049][ T29] audit: type=1326 audit(1726234380.713:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.050458][ T29] audit: type=1326 audit(1726234380.763:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.083848][ T29] audit: type=1326 audit(1726234380.763:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.149318][ T29] audit: type=1326 audit(1726234380.763:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.220105][ T29] audit: type=1326 audit(1726234380.763:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.273189][ T29] audit: type=1326 audit(1726234380.763:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.309070][ T29] audit: type=1326 audit(1726234380.763:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.363042][ T29] audit: type=1326 audit(1726234380.763:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.398269][ T29] audit: type=1326 audit(1726234380.763:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 98.422618][ T29] audit: type=1326 audit(1726234380.763:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f12b7def9 code=0x7ffc0000 [ 99.449558][ T5352] syz.4.18[5352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.449748][ T5352] syz.4.18[5352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.487086][ T5365] pim6reg1: entered promiscuous mode [ 100.593631][ T5365] pim6reg1: entered allmulticast mode [ 101.355129][ T5394] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 101.389589][ T5391] tipc: Started in network mode [ 101.922704][ T5391] tipc: Node identity 6e44aeee8ca, cluster identity 4711 [ 101.979042][ T5391] tipc: Enabled bearer , priority 0 [ 102.141700][ T5398] ªªªªªª: renamed from syzkaller0 [ 102.217741][ T5398] tipc: Disabling bearer [ 102.264155][ T5400] program syz.1.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.428887][ T5405] Zero length message leads to an empty skb [ 102.914944][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 102.937747][ T5416] macsec1: entered allmulticast mode [ 102.943847][ T5416] veth1_macvtap: entered allmulticast mode [ 103.034201][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 103.202157][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 103.202176][ T29] audit: type=1400 audit(1726234385.913:218): avc: denied { read } for pid=5426 comm="syz.4.47" dev="nsfs" ino=4026533403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.226426][ T5430] netlink: 'syz.3.46': attribute type 9 has an invalid length. [ 103.270992][ T29] audit: type=1400 audit(1726234385.913:219): avc: denied { open } for pid=5426 comm="syz.4.47" path="net:[4026533403]" dev="nsfs" ino=4026533403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.273256][ T5430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 103.334746][ T5416] veth1_macvtap (unregistering): left allmulticast mode [ 103.362986][ T29] audit: type=1400 audit(1726234385.913:220): avc: denied { write } for pid=5425 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.433105][ T29] audit: type=1400 audit(1726234385.913:221): avc: denied { read } for pid=5425 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.471355][ T29] audit: type=1400 audit(1726234385.963:222): avc: denied { read } for pid=5425 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.676188][ T5437] xt_limit: Overflow, try lower: 0/0 [ 103.823409][ T5416] syz.0.41 (5416) used greatest stack depth: 20720 bytes left [ 104.146433][ T29] audit: type=1400 audit(1726234386.843:223): avc: denied { create } for pid=5440 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.229444][ T29] audit: type=1400 audit(1726234386.903:224): avc: denied { map } for pid=5440 comm="syz.3.52" path="socket:[7641]" dev="sockfs" ino=7641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.231249][ T5445] pim6reg1: entered promiscuous mode [ 104.296282][ T5445] pim6reg1: entered allmulticast mode [ 104.326893][ T29] audit: type=1400 audit(1726234386.913:225): avc: denied { read } for pid=5440 comm="syz.3.52" path="socket:[7641]" dev="sockfs" ino=7641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.432651][ T29] audit: type=1400 audit(1726234386.913:226): avc: denied { setopt } for pid=5440 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.511815][ T29] audit: type=1400 audit(1726234387.223:227): avc: denied { name_bind } for pid=5449 comm="syz.0.55" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 104.967556][ T5465] netlink: 'syz.1.62': attribute type 9 has an invalid length. [ 104.998988][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 106.696188][ T5500] netlink: 'syz.1.77': attribute type 9 has an invalid length. [ 106.709866][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 107.150644][ T46] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 107.417804][ T46] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 107.460083][ T46] usb 4-1: config 5 has no interface number 0 [ 107.473178][ T46] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 107.505796][ T46] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 107.522842][ T46] usb 4-1: config 5 interface 123 has no altsetting 0 [ 107.535130][ T46] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 107.544786][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.553069][ T46] usb 4-1: Product: syz [ 107.557562][ T46] usb 4-1: Manufacturer: syz [ 107.562330][ T46] usb 4-1: SerialNumber: syz [ 107.580926][ T5503] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.038667][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.095016][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.139796][ T5537] netlink: 72 bytes leftover after parsing attributes in process `syz.4.91'. [ 108.259357][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 108.259376][ T29] audit: type=1400 audit(1726234390.973:274): avc: denied { mounton } for pid=5538 comm="syz.1.92" path="/16/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.340108][ T29] audit: type=1400 audit(1726234391.023:275): avc: denied { mount } for pid=5538 comm="syz.1.92" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.352456][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.458851][ T29] audit: type=1400 audit(1726234391.173:276): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.493605][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.525687][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.613343][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.810384][ T29] audit: type=1400 audit(1726234391.523:277): avc: denied { create } for pid=5551 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.918839][ T46] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 109.021013][ T46] usb 4-1: USB disconnect, device number 2 [ 109.076312][ T29] audit: type=1400 audit(1726234391.793:278): avc: denied { create } for pid=5557 comm="syz.4.101" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.150318][ T29] audit: type=1400 audit(1726234391.833:279): avc: denied { map } for pid=5557 comm="syz.4.101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.180991][ T29] audit: type=1400 audit(1726234391.833:280): avc: denied { read write } for pid=5557 comm="syz.4.101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.230267][ T29] audit: type=1400 audit(1726234391.933:281): avc: denied { create } for pid=5559 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.257820][ T29] audit: type=1400 audit(1726234391.933:282): avc: denied { bind } for pid=5559 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.277533][ T29] audit: type=1400 audit(1726234391.943:283): avc: denied { write } for pid=5559 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.219962][ T5587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 110.253240][ T5587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 110.471231][ T5593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 110.495925][ T5595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.116'. [ 110.516774][ T5595] openvswitch: netlink: Flow key attr not present in new flow. [ 110.972629][ T940] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 111.447387][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.496412][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.742752][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.755543][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.780545][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.842984][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.091257][ T940] usb 4-1: device descriptor read/all, error -71 [ 112.407868][ T5636] Cannot find del_set index 0 as target [ 113.197240][ T5658] capability: warning: `syz.4.145' uses 32-bit capabilities (legacy support in use) [ 114.233698][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 114.233717][ T29] audit: type=1400 audit(1726234396.953:344): avc: denied { watch watch_reads } for pid=5660 comm="syz.3.147" path="/proc/57" dev="proc" ino=8346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 114.449927][ T29] audit: type=1400 audit(1726234397.153:345): avc: denied { bind } for pid=5664 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.557725][ T29] audit: type=1400 audit(1726234397.163:346): avc: denied { write } for pid=5664 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.627955][ T29] audit: type=1400 audit(1726234397.243:347): avc: denied { create } for pid=5661 comm="syz.2.146" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.628019][ T29] audit: type=1400 audit(1726234397.253:348): avc: denied { connect } for pid=5661 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.628076][ T29] audit: type=1400 audit(1726234397.263:349): avc: denied { setopt } for pid=5661 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.797369][ T29] audit: type=1400 audit(1726234397.483:350): avc: denied { create } for pid=5680 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.832665][ T5279] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 114.852499][ T29] audit: type=1400 audit(1726234397.513:351): avc: denied { read } for pid=5679 comm="syz.1.153" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.890999][ T29] audit: type=1400 audit(1726234397.513:352): avc: denied { open } for pid=5679 comm="syz.1.153" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.992600][ T29] audit: type=1400 audit(1726234397.573:353): avc: denied { ioctl } for pid=5679 comm="syz.1.153" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.067592][ T5279] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 115.084791][ T5279] usb 4-1: config 5 has no interface number 0 [ 115.097776][ T5279] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 115.137772][ T5279] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 115.180589][ T5279] usb 4-1: config 5 interface 123 has no altsetting 0 [ 115.199416][ T5279] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 115.218740][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.247324][ T5279] usb 4-1: Product: syz [ 115.251540][ T5279] usb 4-1: Manufacturer: syz [ 115.278909][ T5279] usb 4-1: SerialNumber: syz [ 115.313551][ T5675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.838321][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.884893][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.422837][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.503085][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.552196][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.642963][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.932563][ T5279] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 117.030796][ T5279] usb 4-1: USB disconnect, device number 5 [ 117.664342][ C1] hrtimer: interrupt took 11063096 ns [ 117.809392][ T5730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.175'. [ 117.833428][ T5734] netlink: 256 bytes leftover after parsing attributes in process `syz.3.176'. [ 129.544447][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 129.544478][ T29] audit: type=1400 audit(1726234412.263:378): avc: denied { setopt } for pid=5743 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.683419][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.690210][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.042552][ T29] audit: type=1400 audit(1726234435.723:379): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 153.159440][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.170903][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.183097][ T4615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.190925][ T4615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.203853][ T4615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.212134][ T4615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.221850][ T4615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.229709][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.237854][ T4615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.247648][ T4615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.256027][ T4615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.269232][ T4615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.363598][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.381807][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.391141][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.404524][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.414674][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.422276][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.457663][ T29] audit: type=1400 audit(1726234435.723:380): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 153.605599][ T29] audit: type=1400 audit(1726234435.723:381): avc: denied { read write } for pid=5751 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.665716][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 153.678513][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 153.687368][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 153.696364][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 153.708927][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 153.716907][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 153.781258][ T29] audit: type=1400 audit(1726234435.723:382): avc: denied { open } for pid=5751 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.848790][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 153.858888][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 153.867726][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 153.876798][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 153.887790][ T5235] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 153.895628][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 153.937755][ T29] audit: type=1400 audit(1726234435.853:383): avc: denied { ioctl } for pid=5750 comm="syz-executor" path="socket:[8169]" dev="sockfs" ino=8169 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.974838][ T29] audit: type=1400 audit(1726234436.033:384): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 155.332846][ T54] Bluetooth: hci6: command tx timeout [ 155.340600][ T5235] Bluetooth: hci5: command tx timeout [ 155.492974][ T5235] Bluetooth: hci7: command tx timeout [ 155.812763][ T5235] Bluetooth: hci8: command tx timeout [ 155.972771][ T5235] Bluetooth: hci9: command tx timeout [ 157.417154][ T54] Bluetooth: hci6: command tx timeout [ 157.422779][ T5235] Bluetooth: hci5: command tx timeout [ 157.572984][ T54] Bluetooth: hci7: command tx timeout [ 157.892758][ T54] Bluetooth: hci8: command tx timeout [ 158.052707][ T54] Bluetooth: hci9: command tx timeout [ 159.492833][ T54] Bluetooth: hci6: command tx timeout [ 159.498291][ T54] Bluetooth: hci5: command tx timeout [ 159.652849][ T54] Bluetooth: hci7: command tx timeout [ 159.972847][ T54] Bluetooth: hci8: command tx timeout [ 160.133288][ T54] Bluetooth: hci9: command tx timeout [ 161.572985][ T5235] Bluetooth: hci6: command tx timeout [ 161.578464][ T54] Bluetooth: hci5: command tx timeout [ 161.732802][ T54] Bluetooth: hci7: command tx timeout [ 162.052893][ T54] Bluetooth: hci8: command tx timeout [ 162.212830][ T54] Bluetooth: hci9: command tx timeout [ 177.652816][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2662 jiffies s: 3273 root: 0x2/. [ 177.695513][ T19] rcu: blocking rcu_node structures (internal RCU debug): SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.727384][ T29] audit: type=1400 audit(1726234460.433:385): avc: denied { write } for pid=5213 comm="syz-executor" path="pipe:[3762]" dev="pipefs" ino=3762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 177.756869][ T19] Sending NMI from CPU 0 to CPUs 1: [ 177.762136][ C1] NMI backtrace for cpu 1 [ 177.762162][ C1] CPU: 1 UID: 0 PID: 1128 Comm: kworker/u8:9 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 177.762191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.762206][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 177.762245][ C1] RIP: 0010:match_held_lock+0x5f/0xc0 [ 177.762279][ C1] Code: 28 5c 8f 48 2d 20 4b 92 96 48 c1 f8 03 48 0f af c2 0f b7 53 20 5b 81 e2 ff 1f 00 00 48 39 d0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 01 00 00 00 5b c3 cc cc cc cc 31 f6 e8 3f fe ff ff 48 85 c0 75 [ 177.762301][ C1] RSP: 0018:ffffc90000a18bd8 EFLAGS: 00000046 [ 177.762319][ C1] RAX: 0000000000000014 RBX: ffff888028264780 RCX: ffffc90000a18c70 [ 177.762340][ C1] RDX: 0000000000000005 RSI: ffffffff8e8735a0 RDI: ffff888028264780 [ 177.762356][ C1] RBP: 0000000000000005 R08: 0000000000000000 R09: fffffbfff20289b3 [ 177.762371][ C1] R10: ffffffff90144d9f R11: 0000000000000000 R12: ffffffff8e8735a0 [ 177.762386][ C1] R13: ffffffff8e8735a0 R14: ffffc90000a18c70 R15: 0000000000000004 [ 177.762402][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 177.762425][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.762441][ C1] CR2: 0000000020000080 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 177.762456][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.762470][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.762483][ C1] Call Trace: [ 177.762491][ C1] [ 177.762499][ C1] ? show_regs+0x8c/0xa0 [ 177.762536][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 177.762570][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 177.762603][ C1] ? nmi_handle+0x1a9/0x5c0 [ 177.762625][ C1] ? match_held_lock+0x5f/0xc0 [ 177.762657][ C1] ? default_do_nmi+0x6a/0x160 [ 177.762683][ C1] ? exc_nmi+0x170/0x1e0 [ 177.762707][ C1] ? end_repeat_nmi+0xf/0x53 [ 177.762740][ C1] ? match_held_lock+0x5f/0xc0 [ 177.762771][ C1] ? match_held_lock+0x5f/0xc0 [ 177.762803][ C1] ? match_held_lock+0x5f/0xc0 [ 177.762834][ C1] [ 177.762841][ C1] [ 177.762848][ C1] find_held_lock+0x2d/0x110 [ 177.762878][ C1] lock_release+0x227/0x6f0 [ 177.762910][ C1] ? debug_object_activate+0x13e/0x540 [ 177.762948][ C1] ? __pfx_lock_release+0x10/0x10 [ 177.762983][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 177.763018][ C1] ? debug_object_activate+0x13e/0x540 [ 177.763054][ C1] ? __pfx_advance_sched+0x10/0x10 [ 177.763085][ C1] debug_object_activate+0x160/0x540 [ 177.763121][ C1] ? debug_object_activate+0x13e/0x540 [ 177.763158][ C1] ? lock_acquire+0x1b1/0x560 [ 177.763190][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 177.763231][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 177.763257][ C1] ? __pfx_advance_sched+0x10/0x10 [ 177.763289][ C1] ? enqueue_hrtimer+0x25/0x3c0 [ 177.763313][ C1] enqueue_hrtimer+0x25/0x3c0 [ 177.763344][ C1] __hrtimer_run_queues+0xaac/0xcc0 [ 177.763375][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 177.763401][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 177.763440][ C1] hrtimer_interrupt+0x31b/0x800 [ 177.763474][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 177.763500][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 177.763532][ C1] [ 177.763539][ C1] [ 177.763547][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.763574][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 177.763607][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 02 50 f6 48 89 df e8 be 7f 50 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 f2 41 f6 65 8b 05 76 1d ea 74 85 c0 74 16 5b [ 177.763629][ C1] RSP: 0018:ffffc90004217bc8 EFLAGS: 00000246 [ 177.763646][ C1] RAX: 0000000000000002 RBX: ffff888024409798 RCX: 1ffffffff2d29d9e [ 177.763662][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0fc00 [ 177.763678][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2d248ed [ 177.763692][ C1] R10: ffffffff9692476f R11: 0000000000000000 R12: 0000000000000293 [ 177.763707][ C1] R13: ffff888024409798 R14: ffff888028626780 R15: 0000000000000080 [ 177.763734][ C1] skb_dequeue+0x126/0x180 [ 177.763763][ C1] ieee80211_iface_work+0x21a/0xf00 [ 177.763796][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.763828][ C1] cfg80211_wiphy_work+0x445/0x760 [ 177.763860][ C1] process_one_work+0x9c5/0x1b40 [ 177.763903][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 177.763933][ C1] ? __pfx_process_one_work+0x10/0x10 [ 177.763973][ C1] ? assign_work+0x1a0/0x250 [ 177.764007][ C1] worker_thread+0x6c8/0xf00 [ 177.764048][ C1] ? __kthread_parkme+0x148/0x220 [ 177.764076][ C1] ? __pfx_worker_thread+0x10/0x10 [ 177.764112][ C1] kthread+0x2c1/0x3a0 [ 177.764137][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.764166][ C1] ? __pfx_kthread+0x10/0x10 [ 177.764194][ C1] ret_from_fork+0x45/0x80 [ 177.764228][ C1] ? __pfx_kthread+0x10/0x10 [ 177.764255][ C1] ret_from_fork_asm+0x1a/0x30 [ 177.764296][ C1]