last executing test programs: 10.908655241s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) listxattr(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 9.099281061s ago: executing program 4 (id=19): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x6000003, 0x14032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, 0x0) 8.585009324s ago: executing program 4 (id=24): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) 8.412103661s ago: executing program 4 (id=25): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r6, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 7.752893064s ago: executing program 4 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.65529313s ago: executing program 1 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x1, 0x7000000, 0xb67, 0x4, 0x7e]}, &(0x7f0000000180)=0x54) 7.519755272s ago: executing program 4 (id=32): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 7.426329812s ago: executing program 1 (id=33): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0xffffffd}, 0x8) close(r5) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc82, &(0x7f0000019380)=ANY=[]) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.669692628s ago: executing program 0 (id=41): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000070584024000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 3.888272481s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) socket$nl_generic(0x10, 0x3, 0x10) 3.800155534s ago: executing program 1 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x288, 0x168, 0x10, 0x0, 0xb, 0x288, 0x250, 0x250, 0x288, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 2.709285539s ago: executing program 1 (id=53): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff0007058102400000070582024000000705830240000007058402400000070585024000000705860240000007058702400000070501024000000705020240000007050302400000070504024000000705050240"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.709127656s ago: executing program 2 (id=54): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000b40)=[{&(0x7f0000000100)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b80)='Y', 0x1}], 0x1}], 0x1, 0x0) 2.594199187s ago: executing program 2 (id=55): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 2.50294356s ago: executing program 2 (id=56): r0 = syz_ublk_setup_io_uring(0x7c0, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xc880}, 0x2014) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r9, &(0x7f0000000a40)={0x0, 0x1460, 0x1000, 0x0, 0xb2}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x7fffffe, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4, 0x10a, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0x2, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r11, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4905}, 0x20000000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r12, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x840) 2.456229616s ago: executing program 0 (id=57): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x4a, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 'veth1_to_bridge\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 2.318172998s ago: executing program 0 (id=59): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp']) 2.164591647s ago: executing program 0 (id=60): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x70) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.982962213s ago: executing program 0 (id=61): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.781068817s ago: executing program 2 (id=62): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x4d, {0x3, "f36d660ff6a7ed8800000f20e035000002000f22e065670fc799038000000f799adf000000652626fa0fc71f0f00dc420fc738040f"}}], 0x4d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x5d1d6263, 0x3, 0x2, 0x9], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.702848658s ago: executing program 2 (id=63): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000280)={0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.694029233s ago: executing program 0 (id=64): openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) syz_open_dev$vim2m(&(0x7f0000000200), 0x315, 0x2) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 1.581861052s ago: executing program 3 (id=65): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000b40)=[{&(0x7f0000000100)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b80)='Y', 0x1}], 0x1, &(0x7f0000000a80)}], 0x1, 0x0) 1.436327132s ago: executing program 3 (id=66): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 1.320664634s ago: executing program 3 (id=67): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) read(r2, 0x0, 0x0) write(r3, &(0x7f0000000600)="00020000", 0x4) read(r2, &(0x7f000000031c), 0x13) write(r3, &(0x7f0000000600)="00000001000000020108", 0xa) read(r2, &(0x7f000000070c), 0xa) sendto$inet(r0, &(0x7f0000000700), 0x20, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x40) 1.165090585s ago: executing program 3 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 839.70951ms ago: executing program 3 (id=69): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) acct(0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @remote}, 0xc, {0x2, 0x4e23, @empty}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r2, &(0x7f0000001c00)=[{&(0x7f0000001c40)="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", 0x7bf}], 0x1) 150.765463ms ago: executing program 3 (id=70): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) 144.81712ms ago: executing program 1 (id=71): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 2 (id=72): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) kernel console output (not intermixed with test programs): [ 53.397000][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 53.397015][ T30] audit: type=1400 audit(1785229183.420:127): avc: denied { write } for pid=5574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.447413][ T30] audit: type=1400 audit(1785229183.470:128): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 59.104272][ T30] audit: type=1400 audit(1785229189.120:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.127879][ T30] audit: type=1400 audit(1785229189.150:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.130490][ T5594] cgroup: Unknown subsys name 'net' [ 59.159741][ T30] audit: type=1400 audit(1785229189.180:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.258727][ T5594] cgroup: Unknown subsys name 'cpuset' [ 59.266335][ T5594] cgroup: Unknown subsys name 'rlimit' [ 59.375433][ T30] audit: type=1400 audit(1785229189.390:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.409011][ T30] audit: type=1400 audit(1785229189.390:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.441575][ T30] audit: type=1400 audit(1785229189.390:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.465661][ T30] audit: type=1400 audit(1785229189.400:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.472543][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.487050][ T30] audit: type=1400 audit(1785229189.400:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.520022][ T30] audit: type=1400 audit(1785229189.400:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.543365][ T30] audit: type=1400 audit(1785229189.520:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.489077][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.577302][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.579918][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.585417][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.599871][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.602597][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.614879][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.635294][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.653789][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.662751][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.664106][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.670541][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.678023][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.686066][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.697077][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.699846][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.708208][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.714497][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.720656][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.735016][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.735303][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.751019][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.752365][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.760057][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.765451][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.781373][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.004403][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.011624][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.018799][ T5607] bridge_slave_0: entered allmulticast mode [ 64.025631][ T5607] bridge_slave_0: entered promiscuous mode [ 64.045983][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.053184][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.060355][ T5609] bridge_slave_0: entered allmulticast mode [ 64.067000][ T5609] bridge_slave_0: entered promiscuous mode [ 64.087318][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.094405][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.101695][ T5607] bridge_slave_1: entered allmulticast mode [ 64.108354][ T5607] bridge_slave_1: entered promiscuous mode [ 64.121121][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.128227][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.135307][ T5609] bridge_slave_1: entered allmulticast mode [ 64.142203][ T5609] bridge_slave_1: entered promiscuous mode [ 64.201326][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.208557][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.215754][ T5608] bridge_slave_0: entered allmulticast mode [ 64.222615][ T5608] bridge_slave_0: entered promiscuous mode [ 64.237675][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.252199][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.261731][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.269372][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.276548][ T5608] bridge_slave_1: entered allmulticast mode [ 64.283284][ T5608] bridge_slave_1: entered promiscuous mode [ 64.298116][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.315234][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.330912][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.338123][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.345198][ T5616] bridge_slave_0: entered allmulticast mode [ 64.352059][ T5616] bridge_slave_0: entered promiscuous mode [ 64.384355][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.391964][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.399420][ T5616] bridge_slave_1: entered allmulticast mode [ 64.406068][ T5616] bridge_slave_1: entered promiscuous mode [ 64.418521][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.425601][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.433020][ T5606] bridge_slave_0: entered allmulticast mode [ 64.439844][ T5606] bridge_slave_0: entered promiscuous mode [ 64.455302][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.472991][ T5607] team0: Port device team_slave_0 added [ 64.479269][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.486465][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.493579][ T5606] bridge_slave_1: entered allmulticast mode [ 64.500575][ T5606] bridge_slave_1: entered promiscuous mode [ 64.508378][ T5609] team0: Port device team_slave_0 added [ 64.515867][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.532031][ T5607] team0: Port device team_slave_1 added [ 64.558084][ T5609] team0: Port device team_slave_1 added [ 64.571566][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.581442][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.588446][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.614587][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.646737][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.656446][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.663394][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.689453][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.702147][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.718841][ T5608] team0: Port device team_slave_0 added [ 64.741594][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.751337][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.758321][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.776854][ T5612] Bluetooth: hci2: command tx timeout [ 64.784834][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.802062][ T5608] team0: Port device team_slave_1 added [ 64.821802][ T5616] team0: Port device team_slave_0 added [ 64.834496][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.841670][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.867646][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.877171][ T5611] Bluetooth: hci3: command tx timeout [ 64.884231][ T50] Bluetooth: hci4: command tx timeout [ 64.890107][ T5615] Bluetooth: hci1: command tx timeout [ 64.898219][ T5612] Bluetooth: hci0: command tx timeout [ 64.905136][ T5616] team0: Port device team_slave_1 added [ 64.918424][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.925376][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.951728][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.984053][ T5606] team0: Port device team_slave_0 added [ 64.990412][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.997495][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.023396][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.038633][ T5607] hsr_slave_0: entered promiscuous mode [ 65.044770][ T5607] hsr_slave_1: entered promiscuous mode [ 65.058184][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.065169][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.091075][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.104094][ T5606] team0: Port device team_slave_1 added [ 65.127799][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.134806][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.160819][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.179506][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.186550][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.212519][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.233553][ T5609] hsr_slave_0: entered promiscuous mode [ 65.239602][ T5609] hsr_slave_1: entered promiscuous mode [ 65.245438][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 65.251364][ T5609] Cannot create hsr debugfs directory [ 65.268191][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.275197][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.301248][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.357997][ T5608] hsr_slave_0: entered promiscuous mode [ 65.364010][ T5608] hsr_slave_1: entered promiscuous mode [ 65.370080][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 65.375802][ T5608] Cannot create hsr debugfs directory [ 65.414546][ T5616] hsr_slave_0: entered promiscuous mode [ 65.420695][ T5616] hsr_slave_1: entered promiscuous mode [ 65.426843][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 65.432560][ T5616] Cannot create hsr debugfs directory [ 65.502672][ T5606] hsr_slave_0: entered promiscuous mode [ 65.509008][ T5606] hsr_slave_1: entered promiscuous mode [ 65.514849][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 65.520782][ T5606] Cannot create hsr debugfs directory [ 65.761122][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.771731][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.779588][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.788597][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.807064][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.816055][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.825545][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.827451][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.832198][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.850351][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.923001][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.932642][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.942223][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.950852][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.958856][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.967404][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.974953][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.985236][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.047861][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.057434][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.065174][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.073970][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.081751][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.090594][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.098686][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.107575][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.194495][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.204233][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.212069][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.221023][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.235627][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.244960][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.252766][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.262179][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.272668][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.351092][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.371010][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.380893][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.390608][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.402814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.410221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.419760][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.428469][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.441936][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.451307][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.459230][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.467677][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.479067][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.493265][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.500348][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.519333][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.544753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.551831][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.572797][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.580771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.587831][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.623842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.630937][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.649887][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.656995][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.745433][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.820087][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.858459][ T5612] Bluetooth: hci2: command tx timeout [ 66.859461][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.875079][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.882229][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.921536][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.928673][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.948899][ T5612] Bluetooth: hci0: command tx timeout [ 66.951887][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.954634][ T50] Bluetooth: hci4: command tx timeout [ 66.966540][ T5615] Bluetooth: hci1: command tx timeout [ 66.971941][ T5611] Bluetooth: hci3: command tx timeout [ 66.995175][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.002320][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.035235][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.042388][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.533674][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.575555][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.596669][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.709379][ T5607] veth0_vlan: entered promiscuous mode [ 67.733826][ T5609] veth0_vlan: entered promiscuous mode [ 67.742161][ T5607] veth1_vlan: entered promiscuous mode [ 67.752666][ T5608] veth0_vlan: entered promiscuous mode [ 67.790063][ T5609] veth1_vlan: entered promiscuous mode [ 67.801421][ T5608] veth1_vlan: entered promiscuous mode [ 67.886724][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.899828][ T5607] veth0_macvtap: entered promiscuous mode [ 67.912518][ T5609] veth0_macvtap: entered promiscuous mode [ 67.923228][ T5608] veth0_macvtap: entered promiscuous mode [ 67.932744][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.948767][ T5609] veth1_macvtap: entered promiscuous mode [ 67.958287][ T5607] veth1_macvtap: entered promiscuous mode [ 67.976857][ T5608] veth1_macvtap: entered promiscuous mode [ 68.012512][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.030552][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.045743][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.061454][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.080390][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.109104][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.116925][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.127743][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.159666][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169568][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.183647][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.199858][ T5616] veth0_vlan: entered promiscuous mode [ 68.205996][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.215443][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.241101][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.250909][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.264586][ T5616] veth1_vlan: entered promiscuous mode [ 68.272760][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.281509][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.302586][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.382693][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.394847][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.404410][ T5606] veth0_vlan: entered promiscuous mode [ 68.436786][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.445558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.449286][ T5606] veth1_vlan: entered promiscuous mode [ 68.483468][ T5616] veth0_macvtap: entered promiscuous mode [ 68.497425][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.505256][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.530256][ T5616] veth1_macvtap: entered promiscuous mode [ 68.552529][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.561119][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.597048][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.597485][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.614023][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 68.614035][ T30] audit: type=1400 audit(1785229198.620:153): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.FM1KYl/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.614349][ T5606] veth0_macvtap: entered promiscuous mode [ 68.625532][ T30] audit: type=1400 audit(1785229198.620:154): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.656284][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.683735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.690164][ T30] audit: type=1400 audit(1785229198.670:155): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.FM1KYl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.718632][ T30] audit: type=1400 audit(1785229198.680:156): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.742048][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.750539][ T30] audit: type=1400 audit(1785229198.680:157): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.FM1KYl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.764492][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.780412][ T30] audit: type=1400 audit(1785229198.680:158): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.FM1KYl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.821004][ T5606] veth1_macvtap: entered promiscuous mode [ 68.823902][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.864868][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.869476][ T30] audit: type=1400 audit(1785229198.700:159): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.893775][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.902926][ T30] audit: type=1400 audit(1785229198.740:160): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.942250][ T50] Bluetooth: hci2: command tx timeout [ 68.955402][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.967076][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.975790][ T30] audit: type=1400 audit(1785229198.740:161): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=8206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.982295][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.999555][ T30] audit: type=1400 audit(1785229198.740:162): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.030932][ T50] Bluetooth: hci1: command tx timeout [ 69.036572][ T50] Bluetooth: hci0: command tx timeout [ 69.041967][ T50] Bluetooth: hci4: command tx timeout [ 69.048565][ T50] Bluetooth: hci3: command tx timeout [ 69.076817][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.099615][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.123413][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.161898][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214141][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.156354][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.195243][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.221993][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.252855][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.283438][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.307719][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.360539][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.387825][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.016159][ T5611] Bluetooth: hci2: command tx timeout [ 71.096981][ T5611] Bluetooth: hci3: command tx timeout [ 71.102485][ T50] Bluetooth: hci4: command tx timeout [ 71.106601][ T5615] Bluetooth: hci0: command tx timeout [ 71.107911][ T50] Bluetooth: hci1: command tx timeout [ 71.463587][ T5829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.473497][ T5829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.610509][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 71.645739][ T5836] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 71.716496][ T5837] futex_wake_op: syz.4.5 tries to shift op by 144; fix this program [ 72.224173][ T5839] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 72.490425][ T5852] futex_wake_op: syz.0.16 tries to shift op by 144; fix this program [ 72.509868][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.430999][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 73.576071][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 73.631137][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 73.631152][ T30] audit: type=1400 audit(1785229203.650:222): avc: denied { write } for pid=5874 comm="syz.4.24" name="001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.634771][ T5875] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.24' sets config #0 [ 73.747874][ T5878] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 73.818566][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 73.905779][ T5882] bridge1: entered promiscuous mode [ 74.468122][ T30] audit: type=1400 audit(1785229204.480:223): avc: denied { create } for pid=5886 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.519253][ T30] audit: type=1400 audit(1785229204.490:224): avc: denied { bind } for pid=5886 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.608481][ T30] audit: type=1400 audit(1785229204.490:225): avc: denied { getopt } for pid=5886 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.681791][ T30] audit: type=1400 audit(1785229204.700:226): avc: denied { mounton } for pid=5892 comm="syz.3.31" path="/9/tracefs_dir" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.790258][ T30] audit: type=1400 audit(1785229204.700:227): avc: denied { mount } for pid=5892 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 74.824919][ T5896] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.32' sets config #1 [ 74.903707][ T30] audit: type=1400 audit(1785229204.730:228): avc: denied { search } for pid=5892 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.051292][ T30] audit: type=1400 audit(1785229204.730:229): avc: denied { write } for pid=5892 comm="syz.3.31" name="trace_marker" dev="tracefs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 75.074482][ T30] audit: type=1400 audit(1785229204.730:230): avc: denied { open } for pid=5892 comm="syz.3.31" path="/9/tracefs_dir/trace_marker" dev="tracefs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 75.143633][ T30] audit: type=1400 audit(1785229204.810:231): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.228773][ T5898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.452502][ T5898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.550780][ T5898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.707804][ T5898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.777541][ T5782] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.968844][ T5782] usb 1-1: not running at top speed; connect to a high speed hub [ 77.984317][ T82] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011287][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.039967][ T5782] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 78.060889][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.081324][ T5782] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 78.110237][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.124811][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.134477][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.243962][ T5782] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 78.283759][ T5782] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 78.301122][ T5782] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 78.323861][ T5782] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 78.332297][ T5782] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 78.380445][ T5782] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 78.711232][ T5944] No such timeout policy "syz1" [ 78.743802][ T29] usb 1-1: USB disconnect, device number 2 [ 79.088831][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 79.088847][ T30] audit: type=1400 audit(1785229209.110:262): avc: denied { mount } for pid=5945 comm="syz.2.49" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.133400][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 79.164025][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 79.184576][ T29] keyspan 1-1:1.0: device disconnected [ 79.289810][ T30] audit: type=1400 audit(1785229209.310:263): avc: denied { setopt } for pid=5952 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.406608][ T30] audit: type=1400 audit(1785229209.400:264): avc: denied { read } for pid=5952 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.448680][ T30] audit: type=1400 audit(1785229209.420:265): avc: denied { create } for pid=5935 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.478185][ T30] audit: type=1400 audit(1785229209.420:266): avc: denied { connect } for pid=5935 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.509373][ T30] audit: type=1400 audit(1785229209.530:267): avc: denied { name_connect } for pid=5956 comm="syz.2.54" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.652693][ T30] audit: type=1400 audit(1785229209.670:268): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.696215][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.751088][ T5964] netlink: 'syz.0.57': attribute type 8 has an invalid length. [ 79.781714][ T30] audit: type=1400 audit(1785229209.800:269): avc: denied { create } for pid=5963 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.901098][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.914255][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 79.949775][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.974829][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 80.005761][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 80.033650][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 80.055497][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 80.073144][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 80.090912][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 80.110451][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 80.138291][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 80.159793][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 80.192727][ T5811] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 80.202691][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 80.222288][ T5811] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 80.233603][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.242775][ T5811] usb 2-1: Product: syz [ 80.248049][ T5811] usb 2-1: Manufacturer: syz [ 80.252867][ T5811] usb 2-1: SerialNumber: syz [ 80.262282][ T30] audit: type=1400 audit(1785229210.280:270): avc: denied { name_bind } for pid=5978 comm="syz.0.61" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.284143][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.295069][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.302697][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.311045][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.318550][ T30] audit: type=1400 audit(1785229210.280:271): avc: denied { node_bind } for pid=5978 comm="syz.0.61" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.339538][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.347098][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.354638][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.377014][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.389197][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.405599][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.422581][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.438130][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.473595][ T5811] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 80.498904][ T5811] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 80.525560][ T5811] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 80.552841][ T5811] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 80.567992][ T5811] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 81.062766][ T5997] loop5: detected capacity change from 0 to 7 [ 81.070279][ T5811] usb 2-1: USB disconnect, device number 2 [ 81.092484][ T5997] Dev loop5: unable to read RDB block 7 [ 81.109914][ T5997] loop5: unable to read partition table [ 81.117789][ T5811] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 81.133478][ T5997] loop5: partition table beyond EOD, truncated [ 81.157338][ T5997] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.161168][ T5811] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 81.204710][ T1911] cfg80211: failed to load regulatory.db [ 81.250681][ T5811] keyspan 2-1:1.0: device disconnected [ 82.126380][ T6006] [ 82.129635][ T6006] ============================= [ 82.134518][ T6006] WARNING: suspicious RCU usage [ 82.139714][ T6006] syzkaller #0 Not tainted [ 82.144315][ T6006] ----------------------------- [ 82.149219][ T6006] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 82.158107][ T6006] [ 82.158107][ T6006] other info that might help us debug this: [ 82.158107][ T6006] [ 82.168917][ T6006] [ 82.168917][ T6006] rcu_scheduler_active = 2, debug_locks = 1 [ 82.177027][ T6006] 1 lock held by syz.3.70/6006: [ 82.181879][ T6006] #0: ffff88807ab09c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 82.192411][ T6006] [ 82.192411][ T6006] stack backtrace: [ 82.198433][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.3.70 Not tainted syzkaller #0 PREEMPT(full) [ 82.198458][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.198468][ T6006] Call Trace: [ 82.198474][ T6006] [ 82.198480][ T6006] dump_stack_lvl+0x100/0x190 [ 82.198506][ T6006] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 82.198536][ T6006] xfrm_do_migrate_state+0x2463/0x2f10 [ 82.198565][ T6006] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 82.198586][ T6006] ? __asan_memset+0x23/0x50 [ 82.198605][ T6006] ? __nla_validate_parse+0x1e7/0x28b0 [ 82.198643][ T6006] ? __nla_parse+0x40/0x60 [ 82.198659][ T6006] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 82.198682][ T6006] ? xfrm_user_rcv_msg+0x483/0xd80 [ 82.198698][ T6006] xfrm_user_rcv_msg+0x483/0xd80 [ 82.198721][ T6006] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 82.198740][ T6006] ? kfree_skbmem+0x19f/0x210 [ 82.198769][ T6006] ? consume_skb+0xd6/0x110 [ 82.198819][ T6006] ? rcu_is_watching+0x12/0xc0 [ 82.198848][ T6006] ? trace_contention_end+0x126/0x160 [ 82.198873][ T6006] ? __mutex_lock+0x26d/0x1bd0 [ 82.198898][ T6006] netlink_rcv_skb+0x159/0x420 [ 82.198917][ T6006] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 82.198937][ T6006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.198972][ T6006] xfrm_netlink_rcv+0x71/0x90 [ 82.198998][ T6006] netlink_unicast+0x585/0x850 [ 82.199019][ T6006] ? __pfx_netlink_unicast+0x10/0x10 [ 82.199037][ T6006] ? __pfx_sock_has_perm+0x10/0x10 [ 82.199065][ T6006] netlink_sendmsg+0x8b0/0xda0 [ 82.199086][ T6006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.199105][ T6006] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.199133][ T6006] ____sys_sendmsg+0xa4d/0xbe0 [ 82.199157][ T6006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.199182][ T6006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.199219][ T6006] ___sys_sendmsg+0x190/0x1e0 [ 82.199247][ T6006] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.199274][ T6006] ? __lock_acquire+0x49f/0x1a40 [ 82.199323][ T6006] __sys_sendmsg+0x160/0x210 [ 82.199345][ T6006] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.199378][ T6006] do_syscall_64+0x115/0x870 [ 82.199396][ T6006] ? clear_bhb_loop+0x40/0x90 [ 82.199416][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.199433][ T6006] RIP: 0033:0x7fc6bab9de99 [ 82.199448][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.199463][ T6006] RSP: 002b:00007fc6bba45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.199479][ T6006] RAX: ffffffffffffffda RBX: 00007fc6bae25fa0 RCX: 00007fc6bab9de99 [ 82.199490][ T6006] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 82.199500][ T6006] RBP: 00007fc6bac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 82.199510][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.199519][ T6006] R13: 00007fc6bae26038 R14: 00007fc6bae25fa0 R15: 00007ffddc7d5f48 [ 82.199542][ T6006]