last executing test programs: 9.934042641s ago: executing program 2 (id=80): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/151) 9.112021229s ago: executing program 4 (id=85): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x7, &(0x7f00000001c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) write$UHID_CREATE(r0, &(0x7f0000001880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffa, 0x5f, 0x9, 0x2, 0x4485}}, 0x120) 8.447748406s ago: executing program 4 (id=86): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x6}) 8.389779061s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x68, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1) 6.157664572s ago: executing program 2 (id=90): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f0000000f80)={0x2020}, 0x2020) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x8001008, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)) 5.962604493s ago: executing program 3 (id=93): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5.621550406s ago: executing program 0 (id=94): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffff", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 5.610704979s ago: executing program 4 (id=95): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x50}, 0x1, 0x7}, 0x0) 5.559026378s ago: executing program 1 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) epoll_create1(0x0) 5.490246441s ago: executing program 0 (id=97): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) mkdir(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x81ffffffbfffffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) fcntl$setlease(r0, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r3, r0) fanotify_init(0x4, 0x101000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) 5.456453325s ago: executing program 4 (id=98): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.455453352s ago: executing program 1 (id=99): openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x4, @multicast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYRESHEX=r7]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffcd, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r9, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r11 = syz_open_dev$loop(&(0x7f00000002c0), 0x6, 0x1a2c02) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000440)={r10, 0x0, {0x0, 0x0, 0x0, 0x10000000000000, 0x800000000000, 0x0, 0x0, 0x11, 0xc, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c010000000000000029f35239d2000000000d00000000000000000000000900000000000000010000000074a1337ece247e6100", "24431a1ef781ffffffffffffff0000000010e300", [0x5]}}) 4.369956187s ago: executing program 4 (id=100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x280402, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.18620646s ago: executing program 2 (id=101): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f329191bac0000f3066b808008ed0660f38806f008ee0", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x1, 0x3, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.523788339s ago: executing program 0 (id=102): chdir(&(0x7f0000000100)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.266612891s ago: executing program 1 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x81) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.01404373s ago: executing program 0 (id=104): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffffbf) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) 3.013364174s ago: executing program 3 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 2.942016827s ago: executing program 2 (id=106): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) 2.871578283s ago: executing program 3 (id=107): io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ustat(0x11, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xffffffff}, 0x1c) 2.263467571s ago: executing program 1 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x70, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x70}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r6, 0x0, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.927490463s ago: executing program 0 (id=109): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigpending(0xffffffffffffffff, 0x0) 1.833592074s ago: executing program 3 (id=110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000080000000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) 1.328454793s ago: executing program 1 (id=111): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="af021bd2ea4647968cb02b12f1a91973b18dffe34a028ad7d8110436d9118ba363a0e6aa38d2c3e433385feb74f7be2da2d4d9f47012eba80e1670ab867c53a8fc2979c1b497d3efc51b9fcca60b9b7af2d33761e6f1540ad5509d62c7bfd75b5920a41e0f1230f226aec0bdb9eadee740f87a5d663e198217b0b8caa3875661b0fc47533de4a48a582fd483e802a71e7c093684ba3b17ee34b26f061bc1a186d5d22d0ef89a8d5ed613cd9cd39a564345f956c83b704dceb9b5c84bd8bd211d949f6ebc1ef77c603040054989efa122625aeaf35fd47be2", 0xd8, 0xfffffffffffffffe) openat$iommufd(0xffffff9c, 0x0, 0x20040, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00%\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008e", @ANYRES32, @ANYBLOB="01020300ff0100000000"], 0x58}, 0x1, 0xf00}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x1, @bcast, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, @null, @bpq0, 0x2, 'syz1\x00', @bcast, 0xd, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.265996918s ago: executing program 2 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) close_range(r2, 0xffffffffffffffff, 0x0) 1.093584346s ago: executing program 0 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffff4e6]}, 0x8, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 962.216138ms ago: executing program 3 (id=114): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) 173.790543ms ago: executing program 1 (id=115): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca300000000000024030000c0feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000030000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 78.945833ms ago: executing program 4 (id=116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x6}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 48.526754][ T30] audit: type=1400 audit(1743330276.123:88): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.529194][ T5807] cgroup: Unknown subsys name 'net' [ 48.551355][ T30] audit: type=1400 audit(1743330276.123:89): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.576840][ T30] audit: type=1400 audit(1743330276.163:90): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.710703][ T5807] cgroup: Unknown subsys name 'cpuset' [ 48.717531][ T5807] cgroup: Unknown subsys name 'rlimit' [ 48.856332][ T30] audit: type=1400 audit(1743330276.453:91): avc: denied { setattr } for pid=5807 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.881723][ T30] audit: type=1400 audit(1743330276.453:92): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.902330][ T30] audit: type=1400 audit(1743330276.453:93): avc: denied { write } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.923286][ T30] audit: type=1400 audit(1743330276.453:94): avc: denied { read } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.944022][ T30] audit: type=1400 audit(1743330276.453:95): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.968856][ T30] audit: type=1400 audit(1743330276.453:96): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 48.992136][ T30] audit: type=1400 audit(1743330276.513:97): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.005141][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.785337][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.979960][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.989277][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.997046][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.004864][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.009355][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.012618][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.027043][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.030147][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.034823][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.042396][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.056110][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.056440][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.063310][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.071063][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.084790][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.085972][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.099269][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.099862][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.111171][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.113974][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.122664][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.127734][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.134683][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.154287][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.169871][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.424786][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 53.448313][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 53.474411][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 53.509870][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 53.522045][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 53.554484][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.563002][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.570337][ T5817] bridge_slave_0: entered allmulticast mode [ 53.576690][ T5817] bridge_slave_0: entered promiscuous mode [ 53.603789][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.611004][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.618116][ T5817] bridge_slave_1: entered allmulticast mode [ 53.624693][ T5817] bridge_slave_1: entered promiscuous mode [ 53.643279][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.650527][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.657643][ T5818] bridge_slave_0: entered allmulticast mode [ 53.664125][ T5818] bridge_slave_0: entered promiscuous mode [ 53.671835][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.679268][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.686378][ T5818] bridge_slave_1: entered allmulticast mode [ 53.692893][ T5818] bridge_slave_1: entered promiscuous mode [ 53.707000][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.714193][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.721395][ T5827] bridge_slave_0: entered allmulticast mode [ 53.727657][ T5827] bridge_slave_0: entered promiscuous mode [ 53.740129][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.755054][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.762176][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.769392][ T5827] bridge_slave_1: entered allmulticast mode [ 53.775667][ T5827] bridge_slave_1: entered promiscuous mode [ 53.787311][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.810994][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.821754][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.834509][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.841739][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.849302][ T5824] bridge_slave_0: entered allmulticast mode [ 53.855595][ T5824] bridge_slave_0: entered promiscuous mode [ 53.862412][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.869675][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.876857][ T5824] bridge_slave_1: entered allmulticast mode [ 53.883252][ T5824] bridge_slave_1: entered promiscuous mode [ 53.904847][ T5817] team0: Port device team_slave_0 added [ 53.926229][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.933798][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.941491][ T5833] bridge_slave_0: entered allmulticast mode [ 53.947763][ T5833] bridge_slave_0: entered promiscuous mode [ 53.954592][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.962263][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.969454][ T5833] bridge_slave_1: entered allmulticast mode [ 53.975845][ T5833] bridge_slave_1: entered promiscuous mode [ 53.983162][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.993162][ T5817] team0: Port device team_slave_1 added [ 54.001688][ T5818] team0: Port device team_slave_0 added [ 54.008423][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.023763][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.037378][ T5818] team0: Port device team_slave_1 added [ 54.045535][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.076987][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.092253][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.099245][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.125509][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.147394][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.157945][ T5827] team0: Port device team_slave_0 added [ 54.166076][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.173046][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.199126][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.213952][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.221402][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.247538][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.260234][ T5824] team0: Port device team_slave_0 added [ 54.266667][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.273622][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.299567][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.315490][ T5827] team0: Port device team_slave_1 added [ 54.326161][ T5824] team0: Port device team_slave_1 added [ 54.354535][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.361678][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.387819][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.400321][ T5833] team0: Port device team_slave_0 added [ 54.406314][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.413322][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.439228][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.456563][ T5817] hsr_slave_0: entered promiscuous mode [ 54.463121][ T5817] hsr_slave_1: entered promiscuous mode [ 54.477745][ T5833] team0: Port device team_slave_1 added [ 54.490435][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.497377][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.523577][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.551578][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.558516][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.585252][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.596433][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.603468][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.629548][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.656791][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.665103][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.692681][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.708972][ T5818] hsr_slave_0: entered promiscuous mode [ 54.714854][ T5818] hsr_slave_1: entered promiscuous mode [ 54.720702][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.728346][ T5818] Cannot create hsr debugfs directory [ 54.750817][ T5827] hsr_slave_0: entered promiscuous mode [ 54.756660][ T5827] hsr_slave_1: entered promiscuous mode [ 54.762501][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.770361][ T5827] Cannot create hsr debugfs directory [ 54.784145][ T5824] hsr_slave_0: entered promiscuous mode [ 54.791899][ T5824] hsr_slave_1: entered promiscuous mode [ 54.797598][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.805302][ T5824] Cannot create hsr debugfs directory [ 54.852293][ T5833] hsr_slave_0: entered promiscuous mode [ 54.858223][ T5833] hsr_slave_1: entered promiscuous mode [ 54.865344][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.873186][ T5833] Cannot create hsr debugfs directory [ 55.013297][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.030367][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.045095][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.054340][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.063192][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.071748][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.085488][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.096822][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.124815][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.133119][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.152446][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.168451][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.179928][ T5141] Bluetooth: hci3: command tx timeout [ 55.185423][ T5831] Bluetooth: hci1: command tx timeout [ 55.185432][ T5828] Bluetooth: hci4: command tx timeout [ 55.196751][ T5822] Bluetooth: hci0: command tx timeout [ 55.214428][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.223010][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.232725][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.240795][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.253938][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.260717][ T5822] Bluetooth: hci2: command tx timeout [ 55.267405][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.286680][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.295336][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.335723][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.352322][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.382332][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.405766][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.415252][ T2888] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.422419][ T2888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.431745][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.438819][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.457868][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.464946][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.481578][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.488617][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.529918][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.564306][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.578128][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.588935][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 55.588948][ T30] audit: type=1400 audit(1743330283.193:111): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.618313][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.651437][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.659987][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.674540][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.704979][ T2888] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.712105][ T2888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.732369][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.739470][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.749288][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.756357][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.766066][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.773461][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.783260][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.790341][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.805466][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.812550][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.832416][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.900964][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.985266][ T5817] veth0_vlan: entered promiscuous mode [ 56.007008][ T5817] veth1_vlan: entered promiscuous mode [ 56.057607][ T5817] veth0_macvtap: entered promiscuous mode [ 56.090545][ T5817] veth1_macvtap: entered promiscuous mode [ 56.121346][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.137016][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.156397][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.172550][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.182806][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.193089][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.201849][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.224224][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.245575][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.257930][ T5818] veth0_vlan: entered promiscuous mode [ 56.295580][ T5827] veth0_vlan: entered promiscuous mode [ 56.305314][ T5818] veth1_vlan: entered promiscuous mode [ 56.331878][ T5827] veth1_vlan: entered promiscuous mode [ 56.341352][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.355693][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.385795][ T5818] veth0_macvtap: entered promiscuous mode [ 56.401577][ T5824] veth0_vlan: entered promiscuous mode [ 56.407676][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.410451][ T5824] veth1_vlan: entered promiscuous mode [ 56.421300][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.422278][ T5818] veth1_macvtap: entered promiscuous mode [ 56.435875][ T5833] veth0_vlan: entered promiscuous mode [ 56.451728][ T5827] veth0_macvtap: entered promiscuous mode [ 56.461431][ T30] audit: type=1400 audit(1743330284.063:112): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.xkZAI1/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 56.490839][ T30] audit: type=1400 audit(1743330284.063:113): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.508170][ T5824] veth0_macvtap: entered promiscuous mode [ 56.527425][ T5833] veth1_vlan: entered promiscuous mode [ 56.537916][ T5827] veth1_macvtap: entered promiscuous mode [ 56.543622][ T30] audit: type=1400 audit(1743330284.063:114): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.xkZAI1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.543653][ T30] audit: type=1400 audit(1743330284.063:115): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.543678][ T30] audit: type=1400 audit(1743330284.063:116): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.xkZAI1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.543704][ T30] audit: type=1400 audit(1743330284.063:117): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.xkZAI1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.580373][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.658802][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.669201][ T30] audit: type=1400 audit(1743330284.083:118): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.671970][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.694315][ T30] audit: type=1400 audit(1743330284.103:119): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.721309][ T30] audit: type=1400 audit(1743330284.103:120): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="gadgetfs" ino=6358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.745940][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.756804][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.767776][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.776313][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.784799][ T5833] veth0_macvtap: entered promiscuous mode [ 56.803310][ T5824] veth1_macvtap: entered promiscuous mode [ 56.811046][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.821821][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.832472][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.843062][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.853630][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.863395][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.873948][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.883983][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.894439][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.905179][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.918382][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.942548][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.952274][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.961303][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.976503][ T5833] veth1_macvtap: entered promiscuous mode [ 57.002335][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.017589][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.028126][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.040540][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.051123][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.061783][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.072617][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.089760][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.098494][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.110912][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.119763][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.135234][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.146124][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.157405][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.168414][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.178572][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.189811][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.199962][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.210713][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.221576][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.232528][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.243476][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.253701][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.261378][ T5822] Bluetooth: hci0: command tx timeout [ 57.264267][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.269561][ T5822] Bluetooth: hci1: command tx timeout [ 57.284848][ T5822] Bluetooth: hci3: command tx timeout [ 57.288905][ T5831] Bluetooth: hci4: command tx timeout [ 57.294040][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.306403][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.317238][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.337934][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.343029][ T5913] overlayfs: failed to resolve './file1': -2 [ 57.349515][ T5831] Bluetooth: hci2: command tx timeout [ 57.357195][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.369633][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.380108][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.389924][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.400354][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.410170][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.421316][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.432289][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.444097][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.454859][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.463688][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.472451][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.508664][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.510849][ T5916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 57.523429][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.535114][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.543986][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.621430][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.636435][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.646363][ T5919] ======================================================= [ 57.646363][ T5919] WARNING: The mand mount option has been deprecated and [ 57.646363][ T5919] and is ignored by this kernel. Remove the mand [ 57.646363][ T5919] option from the mount to silence this warning. [ 57.646363][ T5919] ======================================================= [ 57.706331][ T2888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.714314][ T2888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.725109][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.737772][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.751638][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.766995][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.791199][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.799591][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.814192][ T2888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.821229][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.830751][ T2888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.835995][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.882941][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.891374][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.288958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.297560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.307233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.888851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 58.977490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.117468][ T5940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.209451][ T5950] netlink: 268 bytes leftover after parsing attributes in process `syz.1.16'. [ 59.338825][ T5831] Bluetooth: hci3: command tx timeout [ 59.479372][ T5141] Bluetooth: hci4: command tx timeout [ 59.484921][ T5141] Bluetooth: hci1: command tx timeout [ 59.491278][ T5141] Bluetooth: hci0: command tx timeout [ 59.507140][ T5831] Bluetooth: hci2: command tx timeout [ 59.738883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.758919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.759012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 59.808218][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 60.278926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.318136][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.543157][ T5971] process 'syz.2.22' launched './file0' with NULL argv: empty string added [ 60.599844][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 60.599871][ T30] audit: type=1400 audit(1743330288.143:162): avc: denied { execute } for pid=5962 comm="syz.2.22" name="file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.627742][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.926174][ T5976] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.200442][ T30] audit: type=1400 audit(1743330288.153:163): avc: denied { execute_no_trans } for pid=5962 comm="syz.2.22" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.296827][ T30] audit: type=1400 audit(1743330288.173:164): avc: denied { getopt } for pid=5962 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.316467][ T30] audit: type=1400 audit(1743330288.173:165): avc: denied { read write } for pid=5962 comm="syz.2.22" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 61.339666][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.347619][ T30] audit: type=1400 audit(1743330288.173:166): avc: denied { open } for pid=5962 comm="syz.2.22" path="/dev/video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 61.502001][ T30] audit: type=1400 audit(1743330288.183:167): avc: denied { ioctl } for pid=5962 comm="syz.2.22" path="/dev/video1" dev="devtmpfs" ino=930 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 61.526597][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.674067][ T5831] Bluetooth: hci0: command tx timeout [ 61.679584][ T5831] Bluetooth: hci4: command tx timeout [ 61.685009][ T5831] Bluetooth: hci3: command tx timeout [ 61.690481][ T5831] Bluetooth: hci1: command tx timeout [ 62.499014][ T5831] Bluetooth: hci2: command tx timeout [ 62.519815][ T30] audit: type=1400 audit(1743330289.263:168): avc: denied { create } for pid=5978 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.718827][ T30] audit: type=1400 audit(1743330289.263:169): avc: denied { write } for pid=5978 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.810392][ T30] audit: type=1400 audit(1743330289.823:170): avc: denied { create } for pid=5986 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.811582][ T5997] netlink: 268 bytes leftover after parsing attributes in process `syz.1.32'. [ 62.830671][ T30] audit: type=1400 audit(1743330289.833:171): avc: denied { connect } for pid=5986 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.858458][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.889294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.962357][ T5999] loop6: detected capacity change from 0 to 524287999 [ 63.021164][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.030448][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.069373][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.078573][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.087246][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.096379][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.113494][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.122650][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.142222][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 63.162221][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.171412][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.180247][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.189383][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.199124][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.208241][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.216472][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.225585][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.233489][ T5999] ldm_validate_partition_table(): Disk read failed. [ 63.234070][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.249365][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.257353][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.266493][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.275922][ T5999] Dev loop6: unable to read RDB block 0 [ 63.294963][ T5999] loop6: unable to read partition table [ 63.300793][ T5999] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.471995][ T6009] ldm_validate_partition_table(): Disk read failed. [ 63.479776][ T6009] Dev loop6: unable to read RDB block 0 [ 63.486762][ T6009] loop6: unable to read partition table [ 63.492534][ T6009] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 64.650680][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.939410][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 64.954803][ T5875] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 65.015579][ T5875] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 65.036609][ T5875] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 65.055790][ T5875] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.295910][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 66.295934][ T30] audit: type=1400 audit(1743330292.813:201): avc: denied { create } for pid=6043 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.398339][ T5875] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.420048][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.432581][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.441624][ T5875] usb 5-1: SerialNumber: syz [ 66.447845][ T30] audit: type=1400 audit(1743330292.813:202): avc: denied { bind } for pid=6043 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.467617][ T30] audit: type=1400 audit(1743330292.813:203): avc: denied { write } for pid=6043 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.493053][ T6027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.571199][ T6027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.640287][ T30] audit: type=1400 audit(1743330294.243:204): avc: denied { read append } for pid=6054 comm="syz.1.51" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.870359][ T6027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.877603][ T6027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.887366][ T30] audit: type=1400 audit(1743330294.243:205): avc: denied { open } for pid=6054 comm="syz.1.51" path="/dev/sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.040568][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880362a5800: rx timeout, send abort [ 67.042500][ T6060] netlink: 892 bytes leftover after parsing attributes in process `syz.0.52'. [ 67.049205][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880362a5000: rx timeout, send abort [ 67.068772][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880362a5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.083455][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880362a5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.397862][ T30] audit: type=1400 audit(1743330294.993:206): avc: denied { write } for pid=6061 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.572490][ T5875] cdc_ether 5-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 67.652493][ T30] audit: type=1400 audit(1743330295.243:207): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.863241][ T6081] netlink: 64 bytes leftover after parsing attributes in process `syz.3.56'. [ 67.928928][ T30] audit: type=1400 audit(1743330295.483:208): avc: denied { create } for pid=6067 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.263835][ T30] audit: type=1400 audit(1743330295.493:209): avc: denied { ioctl } for pid=6067 comm="syz.3.56" path="socket:[7093]" dev="sockfs" ino=7093 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.305304][ T30] audit: type=1400 audit(1743330295.783:210): avc: denied { read } for pid=6080 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.348684][ T6070] netlink: 'syz.1.58': attribute type 10 has an invalid length. [ 68.360199][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.367700][ T6070] bond0: (slave team0): Enslaving as an active interface with an up link [ 68.382363][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.719864][ T6089] Zero length message leads to an empty skb [ 69.101696][ T5874] usb 5-1: USB disconnect, device number 2 [ 69.109873][ T5874] cdc_ether 5-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 69.174076][ T6100] netlink: 892 bytes leftover after parsing attributes in process `syz.4.63'. [ 70.112037][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 70.185628][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 70.551223][ T6116] netlink: 56 bytes leftover after parsing attributes in process `syz.4.68'. [ 70.660777][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 70.870793][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.877272][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.437085][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 71.437100][ T30] audit: type=1400 audit(1743330299.033:231): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.731422][ T30] audit: type=1400 audit(1743330299.333:232): avc: denied { name_bind } for pid=6151 comm="syz.3.76" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.733744][ T6152] netlink: 68 bytes leftover after parsing attributes in process `syz.3.76'. [ 71.761826][ T5875] kernel write not supported for file /dsp1 (pid: 5875 comm: kworker/0:5) [ 71.825999][ T30] audit: type=1400 audit(1743330299.333:233): avc: denied { create } for pid=6151 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.870513][ T30] audit: type=1400 audit(1743330299.333:234): avc: denied { write } for pid=6151 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.904780][ T30] audit: type=1400 audit(1743330299.333:235): avc: denied { nlmsg_write } for pid=6151 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.974961][ T30] audit: type=1400 audit(1743330299.493:236): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.245762][ T30] audit: type=1400 audit(1743330299.763:237): avc: denied { create } for pid=6155 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.421466][ T30] audit: type=1400 audit(1743330299.783:238): avc: denied { listen } for pid=6155 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.510440][ T30] audit: type=1400 audit(1743330299.793:239): avc: denied { connect } for pid=6155 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.537033][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 72.578920][ T6163] netlink: 56 bytes leftover after parsing attributes in process `syz.4.81'. [ 72.704841][ T6034] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.713192][ T6034] Bluetooth: hci5: Frame reassembly failed (-84) [ 73.205449][ T30] audit: type=1400 audit(1743330300.803:240): avc: denied { accept } for pid=6170 comm="syz.1.84" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 74.465697][ T6191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 74.839558][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 76.099148][ T972] cfg80211: failed to load regulatory.db [ 76.650883][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 76.650897][ T30] audit: type=1400 audit(1743330304.253:252): avc: denied { create } for pid=6208 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.724839][ T30] audit: type=1400 audit(1743330304.283:253): avc: denied { write } for pid=6208 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.231044][ T6230] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 78.298273][ T30] audit: type=1400 audit(1743330305.853:254): avc: denied { setopt } for pid=6225 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.645987][ T30] audit: type=1400 audit(1743330306.233:255): avc: denied { write } for pid=6229 comm="syz.2.101" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.935667][ T30] audit: type=1400 audit(1743330306.533:256): avc: denied { watch } for pid=6234 comm="syz.0.102" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.116917][ T30] audit: type=1400 audit(1743330306.533:257): avc: denied { watch_sb watch_reads } for pid=6234 comm="syz.0.102" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.526238][ T30] audit: type=1400 audit(1743330307.033:258): avc: denied { name_connect } for pid=6239 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.917874][ T30] audit: type=1400 audit(1743330307.053:259): avc: denied { listen } for pid=6239 comm="syz.0.104" lport=52016 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.021026][ T6247] sctp: failed to load transform for md5: -2 [ 80.922710][ T30] audit: type=1400 audit(1743330308.523:260): avc: denied { create } for pid=6261 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.138456][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.111'. [ 81.408877][ T5920] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 81.676138][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.706148][ T5920] usb 3-1: config 0 has no interface number 0 [ 82.061053][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 82.220901][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 82.251306][ T6276] ------------[ cut here ]------------ [ 82.258852][ T6276] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2384:29 [ 82.274259][ T6276] index 16 is out of range for type ' *[16]' [ 82.285719][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.1.115 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 82.285745][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.285755][ T6276] Call Trace: [ 82.285760][ T6276] [ 82.285767][ T6276] dump_stack_lvl+0x16c/0x1f0 [ 82.285792][ T6276] __ubsan_handle_out_of_bounds+0x11c/0x160 [ 82.285816][ T6276] bpf_prog_select_runtime+0x665/0x6f0 [ 82.285838][ T6276] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 82.285866][ T6276] bpf_prog_load+0xe70/0x2480 [ 82.285889][ T6276] ? __pfx_bpf_prog_load+0x10/0x10 [ 82.285909][ T6276] ? avc_has_perm_noaudit+0x149/0x3b0 [ 82.285947][ T6276] ? selinux_bpf+0xde/0x130 [ 82.285974][ T6276] __sys_bpf+0x4a12/0x4cb0 [ 82.285996][ T6276] ? __pfx___sys_bpf+0x10/0x10 [ 82.286015][ T6276] ? __fget_files+0x204/0x3c0 [ 82.286038][ T6276] ? do_futex+0x122/0x350 [ 82.286062][ T6276] ? __pfx_do_futex+0x10/0x10 [ 82.286093][ T6276] ? xfd_validate_state+0x5d/0x180 [ 82.286130][ T6276] ? rcu_is_watching+0x12/0xc0 [ 82.286154][ T6276] __x64_sys_bpf+0x78/0xc0 [ 82.286175][ T6276] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.286194][ T6276] do_syscall_64+0xcd/0x260 [ 82.286225][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.286242][ T6276] RIP: 0033:0x7f41b0d8d169 [ 82.286256][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.286272][ T6276] RSP: 002b:00007f41b1b40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.286290][ T6276] RAX: ffffffffffffffda RBX: 00007f41b0fa5fa0 RCX: 00007f41b0d8d169 [ 82.286301][ T6276] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 82.286311][ T6276] RBP: 00007f41b0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.286321][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.286331][ T6276] R13: 0000000000000000 R14: 00007f41b0fa5fa0 R15: 00007ffe0d802998 [ 82.286349][ T6276] [ 82.286355][ T6276] ---[ end trace ]--- [ 82.308106][ T5920] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.308141][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.309628][ T5920] usb 3-1: config 0 descriptor?? [ 82.517770][ T6276] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 82.524990][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.1.115 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 82.536535][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.546593][ T6276] Call Trace: [ 82.549868][ T6276] [ 82.552794][ T6276] dump_stack_lvl+0x3d/0x1f0 [ 82.557389][ T6276] panic+0x71c/0x800 [ 82.561281][ T6276] ? __pfx_panic+0x10/0x10 [ 82.565696][ T6276] ? __pfx__printk+0x10/0x10 [ 82.570291][ T6276] check_panic_on_warn+0xab/0xb0 [ 82.575224][ T6276] __ubsan_handle_out_of_bounds+0x143/0x160 [ 82.581100][ T6276] bpf_prog_select_runtime+0x665/0x6f0 [ 82.586623][ T6276] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 82.592063][ T6276] bpf_prog_load+0xe70/0x2480 [ 82.596719][ T6276] ? __pfx_bpf_prog_load+0x10/0x10 [ 82.601805][ T6276] ? avc_has_perm_noaudit+0x149/0x3b0 [ 82.607174][ T6276] ? selinux_bpf+0xde/0x130 [ 82.611660][ T6276] __sys_bpf+0x4a12/0x4cb0 [ 82.616053][ T6276] ? __pfx___sys_bpf+0x10/0x10 [ 82.620808][ T6276] ? __fget_files+0x204/0x3c0 [ 82.625477][ T6276] ? do_futex+0x122/0x350 [ 82.629807][ T6276] ? __pfx_do_futex+0x10/0x10 [ 82.634484][ T6276] ? xfd_validate_state+0x5d/0x180 [ 82.639590][ T6276] ? rcu_is_watching+0x12/0xc0 [ 82.644377][ T6276] __x64_sys_bpf+0x78/0xc0 [ 82.648784][ T6276] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.653979][ T6276] do_syscall_64+0xcd/0x260 [ 82.658473][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.664367][ T6276] RIP: 0033:0x7f41b0d8d169 [ 82.668777][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.688384][ T6276] RSP: 002b:00007f41b1b40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.696803][ T6276] RAX: ffffffffffffffda RBX: 00007f41b0fa5fa0 RCX: 00007f41b0d8d169 [ 82.704777][ T6276] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 82.712749][ T6276] RBP: 00007f41b0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.720717][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.728686][ T6276] R13: 0000000000000000 R14: 00007f41b0fa5fa0 R15: 00007ffe0d802998 [ 82.736663][ T6276] [ 82.739869][ T6276] Kernel Offset: disabled [ 82.744189][ T6276] Rebooting in 86400 seconds..