last executing test programs: 32.769889125s ago: executing program 1 (id=153): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.447294552s ago: executing program 1 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe9) syslog(0x4, &(0x7f0000000740)=""/28, 0x1c) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) fsopen(&(0x7f0000000000)='affs\x00', 0x1) 30.135090511s ago: executing program 1 (id=165): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x6, &(0x7f0000000380)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@arp={0x86dd, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @loopback, @broadcast, @local}}}}, 0x0) keyctl$clear(0x7, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x114}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0xc) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) socket(0x10, 0x3, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd", r7}) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 29.900221391s ago: executing program 1 (id=166): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1b42, 0x1a4) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="000004000600"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xb}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = syz_open_procfs(0x0, 0x0) getdents64(r7, 0x0, 0x18) 26.5814729s ago: executing program 1 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) syslog(0x4, &(0x7f0000000740)=""/28, 0x1c) fsopen(&(0x7f0000000000)='affs\x00', 0x1) 24.428271894s ago: executing program 1 (id=180): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x1008020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x21, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x2}}, 0x18) 18.297478828s ago: executing program 0 (id=193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) 17.394306687s ago: executing program 3 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 15.837553115s ago: executing program 3 (id=199): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x1000006) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000200000007"], 0x100040) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x4000, 0xfffffffffffff000}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) socket$packet(0x11, 0x3, 0x300) 13.398523494s ago: executing program 3 (id=202): syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) unshare(0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.399835646s ago: executing program 3 (id=203): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 12.327350227s ago: executing program 0 (id=204): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x5f, 0x0, 0xa, 0x9, 0x2000000, 0x40}) 12.190613708s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000400)="5aee41dea43e", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) accept4(r3, 0x0, 0x0, 0x0) 11.211528264s ago: executing program 0 (id=207): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0x1c}}}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.04895593s ago: executing program 0 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x3, 0xf, {{0x14, 0x4, 0x2, 0x1c, 0x50, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x9d, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xff}]}, @timestamp={0x44, 0x18, 0xad, 0x0, 0x0, [0x3, 0x9, 0x5, 0x8, 0x7f]}, @end, @ssrr={0x89, 0x7, 0x6b, [@dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 8.916478276s ago: executing program 32 (id=180): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x1008020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x21, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x2}}, 0x18) 8.203715754s ago: executing program 0 (id=212): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0x20) 8.200540918s ago: executing program 2 (id=213): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf362100000008000300", @ANYRES32=r2], 0x24}}, 0x9590f6cc3aa711f2) 6.976703351s ago: executing program 2 (id=215): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 6.732755613s ago: executing program 4 (id=216): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) 6.518556546s ago: executing program 2 (id=217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000f100000e8000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="08000000010000", 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x7, 0x0, &(0x7f00000007c0)="9f449487219195", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x2000080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) setgroups(0x0, 0x0) 5.938206377s ago: executing program 0 (id=218): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x1f, 0x8, 0x8}, 0x18) recvmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/133, 0x85}, 0x800}], 0x1, 0x2102, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x400]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0xffd, 0xffffffa5}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40a001, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x2b0}, 0x1, 0x0, 0x0, 0x44005}, 0x20000801) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x44004) 4.645218839s ago: executing program 2 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x5, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1010000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) lseek(r4, 0xfffffffffffffffd, 0x3) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r5, 0x3, 0x0) getdents64(r5, 0xffffffffffffffff, 0x43) 4.427206679s ago: executing program 4 (id=220): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000680)={0x2, @win={{0x9, 0xc, 0x8, 0x8}, 0x8, 0x0, &(0x7f00000002c0)={{0xb, 0x9, 0x9, 0x3}, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0xc}}}, 0x9, &(0x7f0000000780)="7c3db5b614f551010688956184f9a4681f27eaafa9b323316972c712ecc898a0adee2cf5cd1faafb1bae4b8f8eaa26a896c410bf6d572cf357ddf4b9f05aec5de92c2dcfcbfe3eddc40b0d495a56d8c0342910db18be55e897fc416978238af0101868eafea5029d2597d3ca9984b6bb2b1e150c8723b1ae43a420df1cf03770f02625a974423a3142fd9b903082920cb4e66ba5c0ae5416aa898ad3fbbaefaec7d450754fc1dc20f3149b3970a3d26e93b60b8ef96f820e9feb659febd10943b9a152ce177be19cfdac4d", 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) write(r0, &(0x7f00000000c0)="1780869ebe3ab666866b62437305091cbfc88b25c79f27ef660a312084e156e3f466d4e9d07290895bf9ffa77236e87006e9dae59b2f657fda59b0156b64ca994df45f428e6a921f9023cbf52ef27192a3c5918af57450e9c9e5df4e6cb8406925b6bc46befc1438295732f21a5286661d1094a855188c77bd7d744e8f7588f02bdc7064623a1800"/151, 0x9e) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 3.846396668s ago: executing program 3 (id=221): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f40522000000000009"], 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xf7, 0x8, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x2, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, {0x2000, 0x5000, 0x3, 0x1, 0x4, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3c, 0xfc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0xfe}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0xa, 0x8}, {0x1000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1, 0x3]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r4, 0x8926, 0x20001100) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="a1aaaaafaaaa00380000f41eae5686c75377000008", @ANYRESOCT=r4, @ANYRES64=r3, @ANYRES32=r0, @ANYRES32=r1], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 3.450455301s ago: executing program 2 (id=222): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x1f, 0x8, 0x8}, 0x18) recvmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/133, 0x85}, 0x800}], 0x1, 0x2102, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x400]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0xffd, 0xffffffa5}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@multicast, @random=' \x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @private2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40a001, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x2b0}, 0x1, 0x0, 0x0, 0x44005}, 0x20000801) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x44004) 3.300329062s ago: executing program 4 (id=223): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000400)="5aee41dea43e", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002500), 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 1.679809612s ago: executing program 4 (id=224): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xa, 0xd}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.520293524s ago: executing program 2 (id=225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.426577966s ago: executing program 4 (id=226): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 4 (id=227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000f100000e8000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="08000000010000", 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x7, 0x0, &(0x7f00000007c0)="9f449487219195", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x2000080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) setgroups(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 50.761470][ T29] audit: type=1400 audit(1734371584.916:88): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.765964][ T5800] cgroup: Unknown subsys name 'net' [ 50.784229][ T29] audit: type=1400 audit(1734371584.916:89): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.811674][ T29] audit: type=1400 audit(1734371584.946:90): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.974132][ T5800] cgroup: Unknown subsys name 'cpuset' [ 50.981983][ T5800] cgroup: Unknown subsys name 'rlimit' [ 51.137416][ T29] audit: type=1400 audit(1734371585.286:91): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.170602][ T29] audit: type=1400 audit(1734371585.286:92): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.193310][ T29] audit: type=1400 audit(1734371585.286:93): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.214282][ T29] audit: type=1400 audit(1734371585.286:94): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.234619][ T29] audit: type=1400 audit(1734371585.286:95): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.240057][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 51.259534][ T29] audit: type=1400 audit(1734371585.286:96): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.293425][ T29] audit: type=1400 audit(1734371585.316:97): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.212222][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.505269][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.514582][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.526756][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.529662][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.534546][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.548708][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.557557][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.558072][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.565261][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.581471][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.582685][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.588503][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.596279][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.602982][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.611742][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.616966][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.626392][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.632743][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.647042][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.654475][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.661101][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.671291][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.673300][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.691447][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.693919][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.699341][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.714562][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.714628][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.734563][ T5821] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.741886][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.060296][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 55.108321][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 55.123144][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 55.189768][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 55.244303][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.252374][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.259644][ T5814] bridge_slave_0: entered allmulticast mode [ 55.266799][ T5814] bridge_slave_0: entered promiscuous mode [ 55.274996][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.282170][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.289293][ T5814] bridge_slave_1: entered allmulticast mode [ 55.296157][ T5814] bridge_slave_1: entered promiscuous mode [ 55.318335][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 55.371351][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.378482][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.386032][ T5816] bridge_slave_0: entered allmulticast mode [ 55.393529][ T5816] bridge_slave_0: entered promiscuous mode [ 55.400447][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.407941][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.415372][ T5816] bridge_slave_1: entered allmulticast mode [ 55.422269][ T5816] bridge_slave_1: entered promiscuous mode [ 55.461284][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.468398][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.475922][ T5812] bridge_slave_0: entered allmulticast mode [ 55.482906][ T5812] bridge_slave_0: entered promiscuous mode [ 55.489822][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.497122][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.504516][ T5812] bridge_slave_1: entered allmulticast mode [ 55.511572][ T5812] bridge_slave_1: entered promiscuous mode [ 55.519591][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.557351][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.569900][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.577621][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.585058][ T5813] bridge_slave_0: entered allmulticast mode [ 55.592532][ T5813] bridge_slave_0: entered promiscuous mode [ 55.599539][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.607463][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.614853][ T5813] bridge_slave_1: entered allmulticast mode [ 55.621871][ T5813] bridge_slave_1: entered promiscuous mode [ 55.629581][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.669987][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.688200][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.699974][ T5814] team0: Port device team_slave_0 added [ 55.725842][ T5816] team0: Port device team_slave_0 added [ 55.733374][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.744642][ T5814] team0: Port device team_slave_1 added [ 55.750435][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.759836][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.768301][ T5828] bridge_slave_0: entered allmulticast mode [ 55.777073][ T5828] bridge_slave_0: entered promiscuous mode [ 55.786934][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.798038][ T5816] team0: Port device team_slave_1 added [ 55.828180][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.835434][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.845520][ T5828] bridge_slave_1: entered allmulticast mode [ 55.852565][ T5828] bridge_slave_1: entered promiscuous mode [ 55.859979][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.878331][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.885368][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.911393][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.928846][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.938669][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.964904][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.989318][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.996383][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.022694][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.036408][ T5812] team0: Port device team_slave_0 added [ 56.044673][ T5812] team0: Port device team_slave_1 added [ 56.050862][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.058023][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.084157][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.132520][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.144240][ T5813] team0: Port device team_slave_0 added [ 56.151774][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.176950][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.184018][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.210351][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.230559][ T5813] team0: Port device team_slave_1 added [ 56.250150][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.257358][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.283410][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.331657][ T5828] team0: Port device team_slave_0 added [ 56.350102][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.357409][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.383827][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.398003][ T5814] hsr_slave_0: entered promiscuous mode [ 56.406488][ T5814] hsr_slave_1: entered promiscuous mode [ 56.414758][ T5828] team0: Port device team_slave_1 added [ 56.424312][ T5812] hsr_slave_0: entered promiscuous mode [ 56.430629][ T5812] hsr_slave_1: entered promiscuous mode [ 56.436646][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.444594][ T5812] Cannot create hsr debugfs directory [ 56.453093][ T5816] hsr_slave_0: entered promiscuous mode [ 56.459380][ T5816] hsr_slave_1: entered promiscuous mode [ 56.465926][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.473963][ T5816] Cannot create hsr debugfs directory [ 56.480387][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.487696][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.513953][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.585550][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.592798][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.618850][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.647498][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.654859][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.680996][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.721814][ T5824] Bluetooth: hci1: command tx timeout [ 56.721980][ T5821] Bluetooth: hci0: command tx timeout [ 56.744597][ T5813] hsr_slave_0: entered promiscuous mode [ 56.751735][ T5813] hsr_slave_1: entered promiscuous mode [ 56.757822][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.765626][ T5813] Cannot create hsr debugfs directory [ 56.807080][ T5828] hsr_slave_0: entered promiscuous mode [ 56.812771][ T5821] Bluetooth: hci4: command tx timeout [ 56.812818][ T5824] Bluetooth: hci3: command tx timeout [ 56.812825][ T5817] Bluetooth: hci2: command tx timeout [ 56.830504][ T5828] hsr_slave_1: entered promiscuous mode [ 56.836839][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.846954][ T5828] Cannot create hsr debugfs directory [ 57.040364][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.051925][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.066599][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.079653][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.122876][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.148533][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.165387][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.186427][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.195467][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.210197][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.232481][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.241750][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.290639][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.305639][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.318360][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.328196][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.392019][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.412762][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.436508][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.450071][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.475538][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.511750][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.526783][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.534132][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.556058][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.581958][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.589041][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.609203][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.635827][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.643517][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.657161][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.664239][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.677769][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.735686][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.765498][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.772615][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.813287][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.820377][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.844657][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.856995][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 57.857010][ T29] audit: type=1400 audit(1734371592.006:111): avc: denied { sys_module } for pid=5814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.874624][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.901759][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.925371][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.968209][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.004408][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.011546][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.054181][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.069403][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.076551][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.115261][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.122414][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.140691][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.147845][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.179841][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.212106][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.274160][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.343879][ T5828] veth0_vlan: entered promiscuous mode [ 58.363672][ T5814] veth0_vlan: entered promiscuous mode [ 58.378533][ T5828] veth1_vlan: entered promiscuous mode [ 58.410225][ T5812] veth0_vlan: entered promiscuous mode [ 58.436206][ T5812] veth1_vlan: entered promiscuous mode [ 58.491909][ T5814] veth1_vlan: entered promiscuous mode [ 58.511257][ T5828] veth0_macvtap: entered promiscuous mode [ 58.532425][ T5812] veth0_macvtap: entered promiscuous mode [ 58.553731][ T5812] veth1_macvtap: entered promiscuous mode [ 58.562338][ T5828] veth1_macvtap: entered promiscuous mode [ 58.595579][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.614504][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.626711][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.638530][ T5814] veth0_macvtap: entered promiscuous mode [ 58.648422][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.660370][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.673844][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.691943][ T5814] veth1_macvtap: entered promiscuous mode [ 58.709568][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.739461][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.752636][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.771825][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.784274][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.793554][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.805484][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.806654][ T5821] Bluetooth: hci0: command tx timeout [ 58.814385][ T5824] Bluetooth: hci1: command tx timeout [ 58.825743][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.844045][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.854701][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863727][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.872870][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.882397][ T5824] Bluetooth: hci4: command tx timeout [ 58.882472][ T5817] Bluetooth: hci3: command tx timeout [ 58.895981][ T5821] Bluetooth: hci2: command tx timeout [ 58.906731][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.920463][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.931919][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.944149][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.955045][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.992333][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.003030][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.014806][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.025593][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.036372][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.045342][ T5816] veth0_vlan: entered promiscuous mode [ 59.070050][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.079091][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.090635][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.099682][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.141818][ T5816] veth1_vlan: entered promiscuous mode [ 59.210787][ T5813] veth0_vlan: entered promiscuous mode [ 59.233159][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.234782][ T5813] veth1_vlan: entered promiscuous mode [ 59.246877][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.271319][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.280747][ T5816] veth0_macvtap: entered promiscuous mode [ 59.297078][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.307921][ T5816] veth1_macvtap: entered promiscuous mode [ 59.359601][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.360853][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.376454][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.386016][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.390062][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.406007][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.416129][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.426669][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.436648][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.448381][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.462817][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.489002][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.502734][ T29] audit: type=1400 audit(1734371593.656:112): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.VDrIFV/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.506134][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.540182][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.544419][ T29] audit: type=1400 audit(1734371593.686:113): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.550970][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.576821][ T29] audit: type=1400 audit(1734371593.686:114): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.VDrIFV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.583976][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.618871][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.633724][ T29] audit: type=1400 audit(1734371593.686:115): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.641632][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.661463][ T29] audit: type=1400 audit(1734371593.686:116): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.VDrIFV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.696452][ T29] audit: type=1400 audit(1734371593.686:117): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.VDrIFV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.733718][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.737202][ T5813] veth0_macvtap: entered promiscuous mode [ 59.757542][ T29] audit: type=1400 audit(1734371593.686:118): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.781055][ T29] audit: type=1400 audit(1734371593.786:119): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.795589][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.812953][ T29] audit: type=1400 audit(1734371593.786:120): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="gadgetfs" ino=7588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.813230][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.848616][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.857391][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.870827][ T5813] veth1_macvtap: entered promiscuous mode [ 59.880830][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.891641][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.908266][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.921383][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.932757][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.967363][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.999256][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.011928][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.022279][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.033126][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.044373][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.126799][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.149517][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.161164][ T5821] Bluetooth: hci0: command tx timeout [ 61.166581][ T5821] Bluetooth: hci1: command tx timeout [ 61.306505][ T5817] Bluetooth: hci2: command tx timeout [ 61.312673][ T5817] Bluetooth: hci3: command tx timeout [ 61.318802][ T5817] Bluetooth: hci4: command tx timeout [ 61.328527][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.338569][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.338652][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.470900][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.631592][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.691640][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.775750][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.827770][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.859921][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.904804][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.929239][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.938862][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.947885][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.086917][ T5909] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.448074][ T5980] kvm: pic: non byte write [ 62.476276][ T5980] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 62.551070][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.558931][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.467596][ T5824] Bluetooth: hci1: command tx timeout [ 63.479378][ T5817] Bluetooth: hci3: command tx timeout [ 63.487231][ T5817] Bluetooth: hci2: command tx timeout [ 63.493033][ T5817] Bluetooth: hci0: command tx timeout [ 63.498498][ T5817] Bluetooth: hci4: command tx timeout [ 64.099821][ T5991] delete_channel: no stack [ 64.150343][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 64.150377][ T29] audit: type=1400 audit(1734371598.246:150): avc: denied { create } for pid=5986 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 64.302452][ T29] audit: type=1400 audit(1734371598.256:151): avc: denied { ioctl } for pid=5986 comm="syz.2.8" path="socket:[8085]" dev="sockfs" ino=8085 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 64.488024][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.511081][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.657665][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.687136][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.835903][ T29] audit: type=1400 audit(1734371598.966:152): avc: denied { create } for pid=5997 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.886046][ T29] audit: type=1400 audit(1734371598.986:153): avc: denied { create } for pid=5993 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.182471][ T29] audit: type=1400 audit(1734371599.246:154): avc: denied { bind } for pid=5994 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.213040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.310553][ T6004] Device name cannot be null; rc = [-22] [ 65.396917][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.901327][ T29] audit: type=1400 audit(1734371599.246:155): avc: denied { name_bind } for pid=5994 comm="syz.3.11" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 65.931142][ T29] audit: type=1400 audit(1734371599.246:156): avc: denied { node_bind } for pid=5994 comm="syz.3.11" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 66.038706][ T29] audit: type=1400 audit(1734371599.246:157): avc: denied { listen } for pid=5994 comm="syz.3.11" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 66.288407][ T29] audit: type=1400 audit(1734371599.246:158): avc: denied { connect } for pid=5994 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 66.858509][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.053933][ T29] audit: type=1400 audit(1734371599.246:159): avc: denied { name_connect } for pid=5994 comm="syz.3.11" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 69.527045][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 69.527062][ T29] audit: type=1400 audit(1734371603.676:176): avc: denied { read write } for pid=6019 comm="syz.4.5" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.571032][ T29] audit: type=1400 audit(1734371603.676:177): avc: denied { open } for pid=6019 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.594291][ T29] audit: type=1400 audit(1734371603.676:178): avc: denied { ioctl } for pid=6019 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.641623][ T29] audit: type=1400 audit(1734371603.856:179): avc: denied { read } for pid=6023 comm="syz.3.16" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.717661][ T29] audit: type=1400 audit(1734371603.856:180): avc: denied { open } for pid=6023 comm="syz.3.16" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.551429][ T6028] Device name cannot be null; rc = [-22] [ 71.743194][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.749733][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.878654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.041112][ T6030] program syz.3.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.083426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.281597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.390663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.493024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.595452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.595380][ T6005] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.619313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.751481][ T29] audit: type=1400 audit(1734371607.746:181): avc: denied { setopt } for pid=6023 comm="syz.3.16" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.975923][ T29] audit: type=1400 audit(1734371609.126:182): avc: denied { name_bind } for pid=6038 comm="syz.4.20" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.976780][ T29] audit: type=1400 audit(1734371609.126:183): avc: denied { node_bind } for pid=6038 comm="syz.4.20" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.981437][ T29] audit: type=1400 audit(1734371609.126:184): avc: denied { create } for pid=6038 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.549061][ T29] audit: type=1400 audit(1734371609.696:185): avc: denied { create } for pid=6034 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.549097][ T29] audit: type=1400 audit(1734371609.696:186): avc: denied { bind } for pid=6038 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.573560][ T29] audit: type=1400 audit(1734371609.696:187): avc: denied { setopt } for pid=6038 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.573603][ T29] audit: type=1400 audit(1734371609.696:188): avc: denied { accept } for pid=6038 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.666943][ T29] audit: type=1400 audit(1734371609.806:189): avc: denied { ioctl } for pid=6034 comm="syz.2.17" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8232 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.682689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.711193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.823345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.824033][ T29] audit: type=1400 audit(1734371609.976:190): avc: denied { map } for pid=6038 comm="syz.4.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.939206][ T25] cfg80211: failed to load regulatory.db [ 77.038686][ T6056] program syz.1.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.465658][ T6076] program syz.3.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.481055][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 84.481074][ T29] audit: type=1400 audit(1734371618.436:193): avc: denied { create } for pid=6088 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.611151][ T29] audit: type=1400 audit(1734371618.486:194): avc: denied { setopt } for pid=6088 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.948242][ T6098] program syz.0.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.431007][ T29] audit: type=1400 audit(1734371619.446:195): avc: denied { mounton } for pid=6093 comm="syz.3.31" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.478974][ T29] audit: type=1400 audit(1734371619.456:196): avc: denied { read write } for pid=6093 comm="syz.3.31" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 85.504907][ T29] audit: type=1400 audit(1734371619.456:197): avc: denied { open } for pid=6093 comm="syz.3.31" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 85.528562][ T29] audit: type=1400 audit(1734371619.456:198): avc: denied { ioctl } for pid=6093 comm="syz.3.31" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.806237][ T2152] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.951923][ T29] audit: type=1400 audit(1734371622.106:199): avc: denied { getopt } for pid=6103 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.981738][ T29] audit: type=1400 audit(1734371622.126:200): avc: denied { create } for pid=6103 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.044871][ T2152] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.126014][ T2152] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 88.138364][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.175442][ T29] audit: type=1400 audit(1734371622.136:201): avc: denied { setopt } for pid=6103 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.220652][ T2152] usb 2-1: Product: syz [ 88.234581][ T2152] usb 2-1: Manufacturer: syz [ 88.307678][ T2152] usb 2-1: SerialNumber: syz [ 89.133170][ T2152] usb 2-1: config 0 descriptor?? [ 89.505805][ T2152] usb 2-1: can't set config #0, error -71 [ 89.527912][ T2152] usb 2-1: USB disconnect, device number 2 [ 90.563151][ T29] audit: type=1400 audit(1734371624.326:202): avc: denied { setopt } for pid=6178 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.802154][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 91.472435][ T29] audit: type=1400 audit(1734371624.336:203): avc: denied { create } for pid=6178 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.635104][ T29] audit: type=1400 audit(1734371624.356:204): avc: denied { write } for pid=6178 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.656114][ T6288] Bluetooth: MGMT ver 1.23 [ 92.908296][ T29] audit: type=1400 audit(1734371627.006:205): avc: denied { mount } for pid=6224 comm="syz.2.47" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 93.020587][ T29] audit: type=1400 audit(1734371627.116:206): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 93.271160][ T6005] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.104017][ T6005] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.253626][ T6005] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 94.263018][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.340494][ T6005] usb 2-1: Product: syz [ 94.366779][ T6005] usb 2-1: Manufacturer: syz [ 94.374443][ T29] audit: type=1400 audit(1734371628.526:207): avc: denied { create } for pid=6338 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.376059][ T6005] usb 2-1: SerialNumber: syz [ 94.661095][ T29] audit: type=1400 audit(1734371628.566:208): avc: denied { getopt } for pid=6338 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.679743][ T6005] usb 2-1: config 0 descriptor?? [ 94.709144][ T29] audit: type=1400 audit(1734371628.566:209): avc: denied { connect } for pid=6338 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.739735][ T29] audit: type=1400 audit(1734371628.796:210): avc: denied { create } for pid=6338 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.759025][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.862299][ T6341] dccp_flush_write_queue: CCID did not manage to send all packets [ 94.926941][ T6005] redrat3 2-1:0.0: Couldn't find all endpoints [ 94.979280][ T29] audit: type=1400 audit(1734371628.976:211): avc: denied { setopt } for pid=6338 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.079234][ T29] audit: type=1400 audit(1734371631.146:212): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.177921][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.999876][ T6433] sp0: Synchronizing with TNC [ 98.010489][ T6433] sp0: Found TNC [ 98.350613][ T6422] [U] è` [ 98.424395][ T29] audit: type=1400 audit(1734371631.966:213): avc: denied { read write } for pid=6423 comm="syz.4.58" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.448229][ T29] audit: type=1400 audit(1734371631.966:214): avc: denied { open } for pid=6423 comm="syz.4.58" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.534764][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.543896][ T29] audit: type=1400 audit(1734371631.966:215): avc: denied { ioctl } for pid=6423 comm="syz.4.58" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.682140][ T29] audit: type=1400 audit(1734371631.996:216): avc: denied { mounton } for pid=6423 comm="syz.4.58" path="/9/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.781442][ T29] audit: type=1400 audit(1734371632.296:217): avc: denied { mount } for pid=6423 comm="syz.4.58" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.791655][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.812896][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.825880][ T5895] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 98.835283][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.837260][ T29] audit: type=1400 audit(1734371632.996:218): avc: denied { read } for pid=6434 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.887464][ T29] audit: type=1400 audit(1734371633.026:219): avc: denied { open } for pid=6434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.909723][ T5895] usb 4-1: config 0 descriptor?? [ 98.912403][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.960996][ T29] audit: type=1400 audit(1734371633.026:220): avc: denied { getattr } for pid=6434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.990111][ T5895] usb 4-1: can't set config #0, error -71 [ 99.019996][ T5895] usb 4-1: USB disconnect, device number 2 [ 99.090866][ T29] audit: type=1400 audit(1734371633.026:221): avc: denied { getattr } for pid=6434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.387480][ T5865] usb 2-1: USB disconnect, device number 3 [ 99.438446][ T6438] sp0: Synchronizing with TNC [ 99.445019][ T6443] sp0: Found TNC [ 99.451087][ T6437] [U] è` [ 99.832585][ T5865] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.864366][ T5865] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.171047][ T6005] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.399138][ T6005] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.437057][ T6005] usb 1-1: no configurations [ 100.465192][ T6005] usb 1-1: can't read configurations, error -22 [ 100.681536][ T5865] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 100.852438][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.865299][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.885785][ T5865] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 100.907003][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.927369][ T5865] usb 4-1: config 0 descriptor?? [ 101.178856][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.208320][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.452925][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.534415][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.757940][ T5865] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 102.465336][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.509174][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.585167][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.622656][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 102.622671][ T29] audit: type=1400 audit(1734371636.776:242): avc: denied { create } for pid=6503 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.642211][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.684323][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.702986][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.731924][ T2152] usb 4-1: USB disconnect, device number 3 [ 103.062546][ T29] audit: type=1400 audit(1734371637.216:243): avc: denied { mounton } for pid=6507 comm="syz.2.73" path="/17/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.199397][ T6515] Device name cannot be null; rc = [-22] [ 103.361497][ T6005] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.569251][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.780778][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.790648][ T6005] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.804106][ T6005] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 103.813881][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.825706][ T6005] usb 1-1: config 0 descriptor?? [ 104.076314][ T6517] sp0: Synchronizing with TNC [ 104.085494][ T6517] sp0: Found TNC [ 104.093257][ T6516] [U] è` [ 104.139901][ T29] audit: type=1400 audit(1734371638.256:244): avc: denied { connect } for pid=6518 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.307030][ T5865] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.721181][ T29] audit: type=1400 audit(1734371638.256:245): avc: denied { write } for pid=6518 comm="syz.4.76" path="socket:[9803]" dev="sockfs" ino=9803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.843668][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.847197][ T29] audit: type=1400 audit(1734371638.976:246): avc: denied { create } for pid=6526 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.866283][ T5865] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 104.876728][ T29] audit: type=1400 audit(1734371638.976:247): avc: denied { read } for pid=6526 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.905100][ T29] audit: type=1400 audit(1734371638.986:248): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.931540][ T6005] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 104.931590][ T6005] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 104.931615][ T6005] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 104.931639][ T6005] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 104.931662][ T6005] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 104.935389][ T6005] gt683r_led 0003:1770:FF00.0003: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 105.170781][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.179110][ T5865] usb 4-1: Product: syz [ 105.183347][ T5865] usb 4-1: Manufacturer: syz [ 105.187955][ T5865] usb 4-1: SerialNumber: syz [ 105.208449][ T5865] usb 4-1: config 0 descriptor?? [ 106.129416][ T5865] redrat3 4-1:0.0: Couldn't find all endpoints [ 106.882716][ T2152] usb 1-1: USB disconnect, device number 4 [ 107.857951][ T25] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 107.895706][ T29] audit: type=1400 audit(1734371641.686:249): avc: denied { connect } for pid=6521 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.210427][ T6553] Zero length message leads to an empty skb [ 108.891257][ T2152] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.159658][ T6569] program syz.1.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.446106][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.749562][ T2152] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 109.758837][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.767054][ T2152] usb 1-1: Product: syz [ 109.771283][ T2152] usb 1-1: Manufacturer: syz [ 109.775925][ T2152] usb 1-1: SerialNumber: syz [ 109.864103][ T25] usb 4-1: USB disconnect, device number 4 [ 109.876966][ T2152] usb 1-1: config 0 descriptor?? [ 110.900189][ T2152] redrat3 1-1:0.0: Couldn't find all endpoints [ 112.601837][ T6637] sp0: Synchronizing with TNC [ 112.607896][ T6637] sp0: Found TNC [ 112.747018][ T6593] [U] è` [ 114.071042][ T6649] delete_channel: no stack [ 115.183189][ T5866] usb 1-1: USB disconnect, device number 5 [ 117.109642][ T29] audit: type=1400 audit(1734371651.236:250): avc: denied { mounton } for pid=6682 comm="syz.0.96" path="/proc/64/task" dev="proc" ino=8765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.001996][ T6760] sp0: Synchronizing with TNC [ 118.046323][ T6760] sp0: Found TNC [ 118.577043][ T6755] [U] `èè` [ 118.609719][ T6759] syz.4.101 uses obsolete (PF_INET,SOCK_PACKET) [ 118.679572][ T29] audit: type=1400 audit(1734371652.826:251): avc: denied { create } for pid=6758 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.068083][ T29] audit: type=1400 audit(1734371653.216:252): avc: denied { ioctl } for pid=6758 comm="syz.4.101" path="socket:[8775]" dev="sockfs" ino=8775 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.261126][ T29] audit: type=1400 audit(1734371653.296:253): avc: denied { sys_module } for pid=6758 comm="syz.4.101" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 119.465485][ T5896] IPVS: starting estimator thread 0... [ 120.105123][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 120.270110][ T6782] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.294231][ T29] audit: type=1400 audit(1734371657.826:254): avc: denied { create } for pid=6811 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.899668][ T6905] overlayfs: missing 'lowerdir' [ 133.017982][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.024373][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.308404][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 136.684872][ T29] audit: type=1400 audit(1734371670.826:255): avc: denied { mount } for pid=7127 comm="syz.1.130" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.751186][ T29] audit: type=1400 audit(1734371670.866:256): avc: denied { unlink } for pid=7131 comm="syz.2.131" name="#1" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.831839][ T7141] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.080203][ T29] audit: type=1400 audit(1734371671.226:257): avc: denied { connect } for pid=7142 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.148830][ T29] audit: type=1400 audit(1734371673.206:258): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.948160][ T7195] program syz.0.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.662200][ T5958] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.809164][ T5895] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.733547][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 145.752122][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 146.041644][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.283955][ T5895] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 146.311197][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 146.320554][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 146.324825][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.338572][ T7246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.155'. [ 146.371593][ T5895] usb 4-1: Product: syz [ 146.379507][ T5895] usb 4-1: Manufacturer: syz [ 146.405673][ T5895] usb 4-1: SerialNumber: syz [ 146.430851][ T5895] usb 4-1: config 0 descriptor?? [ 146.453332][ T5895] redrat3 4-1:0.0: Couldn't find all endpoints [ 148.295952][ T6005] usb 4-1: USB disconnect, device number 5 [ 148.482522][ T7251] [U] é [ 149.061124][ T6005] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.246828][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.297295][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.436552][ T6005] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.564859][ T6005] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 149.584005][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.597357][ T6005] usb 5-1: config 0 descriptor?? [ 150.982436][ T6005] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 150.990570][ T6005] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 150.998020][ T6005] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 151.005416][ T6005] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 151.013455][ T6005] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 151.041694][ T6005] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 151.949492][ T29] audit: type=1400 audit(1734371686.096:259): avc: denied { write } for pid=7276 comm="syz.4.163" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.116302][ T5895] usb 5-1: USB disconnect, device number 3 [ 152.126228][ T5896] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 152.450412][ T7316] sp0: Synchronizing with TNC [ 152.456566][ T7316] sp0: Found TNC [ 153.121962][ T7314] [U] è` [ 156.712432][ T29] audit: type=1400 audit(1734371690.856:260): avc: denied { ioctl } for pid=7343 comm="syz.1.180" path="socket:[9214]" dev="sockfs" ino=9214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.799510][ T29] audit: type=1400 audit(1734371690.896:261): avc: denied { bind } for pid=7343 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.210210][ T7461] [U] `èé [ 167.642247][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 167.649343][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.126600][ T7501] sp0: Synchronizing with TNC [ 168.132735][ T7501] sp0: Found TNC [ 168.687521][ T7493] [U] è` [ 170.618853][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.746871][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.755377][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.786131][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.793769][ T5817] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.801648][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.004442][ T29] audit: type=1400 audit(1734371705.126:262): avc: denied { mounton } for pid=7586 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 171.155312][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 174.421418][ T5821] Bluetooth: hci5: command tx timeout [ 174.443572][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 174.633596][ T6005] IPVS: starting estimator thread 0... [ 174.841174][ T7648] IPVS: using max 22 ests per chain, 52800 per kthread [ 176.426623][ T7668] program syz.2.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.470425][ T6005] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.569417][ T5821] Bluetooth: hci5: command tx timeout [ 177.210596][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.236082][ T6005] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.249340][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.257854][ T7586] bridge_slave_0: entered allmulticast mode [ 177.265083][ T7586] bridge_slave_0: entered promiscuous mode [ 177.282238][ T6005] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 177.296021][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.323688][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.341345][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.349825][ T6005] usb 4-1: Product: syz [ 177.351032][ T7586] bridge_slave_1: entered allmulticast mode [ 177.368178][ T7586] bridge_slave_1: entered promiscuous mode [ 177.407940][ T6005] usb 4-1: Manufacturer: syz [ 177.734804][ T6005] usb 4-1: SerialNumber: syz [ 177.761441][ T6005] usb 4-1: config 0 descriptor?? [ 177.798044][ T6005] redrat3 4-1:0.0: Couldn't find all endpoints [ 177.937353][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.955901][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.226'. [ 177.983595][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.797126][ T5821] Bluetooth: hci5: command tx timeout [ 178.885045][ C1] ------------[ cut here ]------------ [ 178.890736][ C1] WARNING: CPU: 1 PID: 0 at kernel/workqueue.c:2257 __queue_work+0xc3a/0x1080 [ 178.899651][ C1] Modules linked in: [ 178.903567][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc3-syzkaller #0 [ 178.912167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 178.922211][ C1] RIP: 0010:__queue_work+0xc3a/0x1080 [ 178.927577][ C1] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 5f a6 99 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 70 fa 36 00 85 db 75 60 e8 27 f8 36 00 90 <0f> 0b 90 e9 f9 f7 ff ff e8 19 f8 36 00 90 0f 0b 90 e9 7e f6 ff ff [ 178.947178][ C1] RSP: 0018:ffffc90000a18be8 EFLAGS: 00010046 [ 178.953229][ C1] RAX: 0000000000000000 RBX: 0000000000000100 RCX: ffffffff81631bc1 [ 178.961199][ C1] RDX: ffff88801d29c880 RSI: ffffffff81631c19 RDI: 0000000000000005 [ 178.969158][ C1] RBP: ffff88805e7308e8 R08: 0000000000000005 R09: 0000000000000000 [ 178.977142][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: 1ffff9200014318f [ 178.985093][ C1] R13: 0000000000000001 R14: 0000000000000101 R15: ffff88802ab96000 [ 178.993044][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 179.001961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.008544][ C1] CR2: 0000001b2f3e6ffc CR3: 000000005b162000 CR4: 00000000003526f0 [ 179.016613][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.024587][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.032572][ C1] Call Trace: [ 179.035859][ C1] [ 179.038708][ C1] ? __warn+0xea/0x3c0 [ 179.042785][ C1] ? __queue_work+0xc3a/0x1080 [ 179.047542][ C1] ? report_bug+0x3c0/0x580 [ 179.052045][ C1] ? handle_bug+0x54/0xa0 [ 179.056437][ C1] ? exc_invalid_op+0x17/0x50 [ 179.061117][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 179.066178][ C1] ? __queue_work+0xbe1/0x1080 [ 179.070972][ C1] ? __queue_work+0xc39/0x1080 [ 179.075745][ C1] ? __queue_work+0xc3a/0x1080 [ 179.080519][ C1] ? __queue_work+0xc39/0x1080 [ 179.085277][ C1] ? lock_acquire+0x2f/0xb0 [ 179.089766][ C1] ? call_timer_fn+0x11a/0x610 [ 179.094517][ C1] call_timer_fn+0x1a0/0x610 [ 179.099094][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 179.104890][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 179.109999][ C1] ? __pfx_lock_release+0x10/0x10 [ 179.115019][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.120388][ C1] ? lock_acquire+0x2f/0xb0 [ 179.124883][ C1] ? __run_timers+0x6f0/0x930 [ 179.129563][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 179.135362][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 179.141178][ C1] __run_timers+0x56a/0x930 [ 179.145677][ C1] ? __pfx___run_timers+0x10/0x10 [ 179.150702][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 179.156424][ C1] ? rcu_is_watching+0x12/0xc0 [ 179.161211][ C1] ? lock_acquire+0x2f/0xb0 [ 179.165700][ C1] ? run_timer_base+0x10c/0x190 [ 179.170562][ C1] run_timer_base+0x114/0x190 [ 179.175228][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 179.180435][ C1] run_timer_softirq+0x1a/0x40 [ 179.185200][ C1] handle_softirqs+0x213/0x8f0 [ 179.189954][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 179.195258][ C1] __irq_exit_rcu+0x109/0x170 [ 179.199919][ C1] irq_exit_rcu+0x9/0x30 [ 179.204161][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 179.209784][ C1] [ 179.212700][ C1] [ 179.215613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.221594][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 179.226875][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 85 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 2c b4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 179.247004][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 179.253087][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b293679 [ 179.261061][ C1] RDX: 0000000000000001 RSI: ffff888143aeb800 RDI: ffff888143aeb864 [ 179.269020][ C1] RBP: ffff888143aeb864 R08: 0000000000000001 R09: ffffed10170e6fed [ 179.277004][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff888145aee000 [ 179.284964][ C1] R13: ffffffff8ee16120 R14: 0000000000000001 R15: 0000000000000000 [ 179.292926][ C1] ? ct_kernel_exit+0x139/0x190 [ 179.297773][ C1] acpi_idle_enter+0xc5/0x160 [ 179.302484][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 179.307517][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 179.313318][ C1] cpuidle_enter+0x4e/0xa0 [ 179.317756][ C1] do_idle+0x310/0x3f0 [ 179.321833][ C1] ? __pfx_do_idle+0x10/0x10 [ 179.326417][ C1] cpu_startup_entry+0x4f/0x60 [ 179.331167][ C1] start_secondary+0x222/0x2b0 [ 179.335911][ C1] ? __pfx_start_secondary+0x10/0x10 [ 179.341204][ C1] common_startup_64+0x13e/0x148 [ 179.346147][ C1] [ 179.349145][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.356418][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc3-syzkaller #0 [ 179.365004][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 179.375139][ C1] Call Trace: [ 179.378434][ C1] [ 179.381275][ C1] dump_stack_lvl+0x3d/0x1f0 [ 179.386084][ C1] panic+0x71d/0x800 [ 179.389988][ C1] ? __pfx_panic+0x10/0x10 [ 179.394400][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 179.399585][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 179.404675][ C1] ? __queue_work+0xc3a/0x1080 [ 179.409422][ C1] check_panic_on_warn+0xab/0xb0 [ 179.414340][ C1] __warn+0xf6/0x3c0 [ 179.418219][ C1] ? __queue_work+0xc3a/0x1080 [ 179.422963][ C1] report_bug+0x3c0/0x580 [ 179.427286][ C1] handle_bug+0x54/0xa0 [ 179.431428][ C1] exc_invalid_op+0x17/0x50 [ 179.435919][ C1] asm_exc_invalid_op+0x1a/0x20 [ 179.440753][ C1] RIP: 0010:__queue_work+0xc3a/0x1080 [ 179.446109][ C1] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 5f a6 99 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 70 fa 36 00 85 db 75 60 e8 27 f8 36 00 90 <0f> 0b 90 e9 f9 f7 ff ff e8 19 f8 36 00 90 0f 0b 90 e9 7e f6 ff ff [ 179.465711][ C1] RSP: 0018:ffffc90000a18be8 EFLAGS: 00010046 [ 179.471781][ C1] RAX: 0000000000000000 RBX: 0000000000000100 RCX: ffffffff81631bc1 [ 179.479749][ C1] RDX: ffff88801d29c880 RSI: ffffffff81631c19 RDI: 0000000000000005 [ 179.487720][ C1] RBP: ffff88805e7308e8 R08: 0000000000000005 R09: 0000000000000000 [ 179.495682][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: 1ffff9200014318f [ 179.503635][ C1] R13: 0000000000000001 R14: 0000000000000101 R15: ffff88802ab96000 [ 179.511599][ C1] ? __queue_work+0xbe1/0x1080 [ 179.516350][ C1] ? __queue_work+0xc39/0x1080 [ 179.521100][ C1] ? __queue_work+0xc39/0x1080 [ 179.525846][ C1] ? lock_acquire+0x2f/0xb0 [ 179.530330][ C1] ? call_timer_fn+0x11a/0x610 [ 179.535076][ C1] call_timer_fn+0x1a0/0x610 [ 179.539647][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 179.545440][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 179.550529][ C1] ? __pfx_lock_release+0x10/0x10 [ 179.555542][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.560903][ C1] ? lock_acquire+0x2f/0xb0 [ 179.565385][ C1] ? __run_timers+0x6f0/0x930 [ 179.570041][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 179.575845][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 179.581637][ C1] __run_timers+0x56a/0x930 [ 179.586124][ C1] ? __pfx___run_timers+0x10/0x10 [ 179.591128][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 179.596740][ C1] ? rcu_is_watching+0x12/0xc0 [ 179.601505][ C1] ? lock_acquire+0x2f/0xb0 [ 179.606149][ C1] ? run_timer_base+0x10c/0x190 [ 179.611009][ C1] run_timer_base+0x114/0x190 [ 179.615695][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 179.620881][ C1] run_timer_softirq+0x1a/0x40 [ 179.625641][ C1] handle_softirqs+0x213/0x8f0 [ 179.630412][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 179.635686][ C1] __irq_exit_rcu+0x109/0x170 [ 179.640345][ C1] irq_exit_rcu+0x9/0x30 [ 179.644577][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 179.650216][ C1] [ 179.653134][ C1] [ 179.656048][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.662019][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 179.667309][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 85 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 2c b4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 179.686935][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 179.693074][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b293679 [ 179.701036][ C1] RDX: 0000000000000001 RSI: ffff888143aeb800 RDI: ffff888143aeb864 [ 179.708986][ C1] RBP: ffff888143aeb864 R08: 0000000000000001 R09: ffffed10170e6fed [ 179.716935][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff888145aee000 [ 179.724888][ C1] R13: ffffffff8ee16120 R14: 0000000000000001 R15: 0000000000000000 [ 179.732862][ C1] ? ct_kernel_exit+0x139/0x190 [ 179.737710][ C1] acpi_idle_enter+0xc5/0x160 [ 179.742374][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 179.747391][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 179.753182][ C1] cpuidle_enter+0x4e/0xa0 [ 179.757586][ C1] do_idle+0x310/0x3f0 [ 179.761638][ C1] ? __pfx_do_idle+0x10/0x10 [ 179.766207][ C1] cpu_startup_entry+0x4f/0x60 [ 179.770956][ C1] start_secondary+0x222/0x2b0 [ 179.775712][ C1] ? __pfx_start_secondary+0x10/0x10 [ 179.780993][ C1] common_startup_64+0x13e/0x148 [ 179.785938][ C1] [ 179.789160][ C1] Kernel Offset: disabled [ 179.793521][ C1] Rebooting in 86400 seconds..