last executing test programs: 439.624651ms ago: executing program 3 (id=4): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0xfffffff7) close_range(0xffffffffffffffff, r0, 0x0) recvfrom$phonet(r0, &(0x7f0000000040)=""/24, 0x18, 0x0, &(0x7f0000000080)={0x23, 0x7, 0xc1, 0xb}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') socket$inet6(0xa, 0xa, 0xc0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x80, @empty, 0x7}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x48) r2 = getuid() quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x6}) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) connect$packet(r1, &(0x7f0000000240)={0x11, 0x16, r3, 0x1, 0x40, 0x6, @multicast}, 0x14) quotactl_fd$Q_SYNC(r1, 0xdcf2aa3cc2e3947c, 0x0, 0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {}, [{0x2, 0x7, r2}, {0x2, 0x4, r2}, {0x2, 0x0, r4}], {0x4, 0x7}, [{0x8, 0x6, r5}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x3, r6}, {0x8, 0x0, r7}], {0x10, 0x3}, {0x20, 0x3}}, 0x64, 0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000640)={0xfffffffe, 0x0, 0x0, {0xc00000, 0x8}, 0x8, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000006c0)={0x10004, 0x0, 0x25000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000700)) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000740)={r1}) r8 = syz_open_dev$loop(&(0x7f0000000780), 0x100, 0x400000) splice(r8, &(0x7f00000007c0)=0x3, r1, &(0x7f0000000800)=0x4, 0x0, 0x2) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f0000002880)='autogroup\x00') sendmsg$nl_route(r10, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=@ipv4_getnexthop={0x20, 0x6a, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x20008040) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000029c0)={0x2, 0x8, 0xf8b0, 0x0, 0x8000, 0x7}, &(0x7f0000002a00)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000002a40)={r11, 0x6}, &(0x7f0000002a80)=0x8) write(r10, &(0x7f0000002ac0)="329b7e07f84c89ecbd452c271e030d7196ffa36e0282dc30e2c596b0ccb6d1cebcc10c8bd94eed50f47956b96d11ac9f0fdba37c16f534387ed598a375591529d0da6ecc17f5610a85970ad9eddd660780b04708a9c0cb164d26438e926a415bb723bcd0930063c8abf3ee2b0002d751708de522ac3ffb7864a7f234499240d70d99c4fb507f71ad9cb116abe33967c818fe8b6c49639ff3e6134a4c9fa550e007df1a7285b820", 0xa7) 216.681558ms ago: executing program 1 (id=2): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) 181.328635ms ago: executing program 2 (id=3): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000002c0000001400040076657468305f6d616376746170000000040017"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r5) getsockname$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) sendto$packet(r4, 0x0, 0x0, 0x20000085, &(0x7f0000000980)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @local}, 0x14) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x809}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c0012ff030000d0899047ff95ef33000c0002800800"], 0x3c}}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f0000000140)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r8, &(0x7f0000000200)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000380)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$inet6(r10, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) write$tun(r9, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf92"}}}}, 0x73) 149.168592ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./my_configfs\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000540)="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", 0x12d}, {&(0x7f0000000700)="a632d1428982a252324f258392e316f18cf86b2e26ac0af8c71b95c35316f3831129f3e611dc5fa965da5032081ce03b9792739343bf80dbc4659935a61e2b9a7fe3a4a89869f95f15cd0fe0cbc18f6a6d873a310a108980d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46ba10031706e2fa27537ff5b9ee7f54d19f8a6d5dcc1711be704ea7424b04854aa7ea52a67f412b25168797edb27644d2b8356bedb99f1fbe00567f2438cb4f205ad8c0c91d75385b90c102000000000000002c8bcbe34f9411542cc837ee91388dc51b9c9e60a52da69045f95ade368dc4d145513ea2260dc86d637b44376576648e7adca3e283860d34b8bcb6d16aa39d00000000", 0x113}, {&(0x7f0000000840)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000900)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000a00)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r0, &(0x7f0000000b80), 0x5b0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="6664eba1b4f6c1f9ffffffffffffffe1137d3d", @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="7d4a4b99991f2274"]) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0xb) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) 99.523546ms ago: executing program 1 (id=5): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x88802, 0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x520000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000040)={0xfee00000, 0x10000}) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000000) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='gfs2\x00', 0x10, &(0x7f0000000180)='barrier') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket(0x5, 0x800, 0xffffff7f) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002100010025bd7000fddbdf250200001400000000010001001400030069703665727370616e3000000089a454"], 0x30}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)={0x5, 0x0, [{0xa10, 0x0, 0xb1}, {0x88, 0x0, 0x1}, {0x2b2, 0x0, 0x6}, {0x39c, 0x0, 0x8000000006}, {0xb53, 0x0, 0x4}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1fe) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='27', 0x2) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000003c0)={0x10000, 0x2, 0x33}, 0x18) mkdirat(r6, &(0x7f0000000400)='./proc\x00', 0x21) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 12.047265ms ago: executing program 1 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000400)=@arm64_ccsidr={0x6020000000110009, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000440)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x404) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000140)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, r9, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044005}, 0x4c810) 0s ago: executing program 0 (id=7): setns(0xc9, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x301000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006c80)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000006cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006d00)=0x14) sendmsg$nl_route(r2, &(0x7f0000006d40)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006dc0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000006e00)={0x0, 0x0, &(0x7f0000006e40)={&(0x7f0000006e80)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c000) 0s ago: executing program 3 (id=15): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x34}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xe, 0x9}, {}, {0x10, 0x5}, {0x7, 0xfffffe00}, {0x2, 0x4}, {0x3, 0x7}]}, @fwd={0xa}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @enum64={0xe, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x4, 0xc000, 0xe543}, {0x6, 0x4, 0x6}, {0x0, 0xe}, {0x2, 0x2fb, 0x2}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000600)=""/29, 0xcf, 0x1d, 0x1, 0x40}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/tcp6\x00') close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000840)='3', 0x4e) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4018, r1}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a40), 0x7ff, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a80)={r9, &(0x7f0000000ac0), &(0x7f0000000b00)=""/89}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x7, &(0x7f00000001c0)=@raw=[@alu={0x7, 0x0, 0x4, 0x5, 0x0, 0xffffffffffffffe0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x4, 0xf8, &(0x7f0000000280)=""/248, 0x0, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xe, 0xd, 0x40}, 0x10, 0x244ee, r1, 0x9, &(0x7f0000000d00)=[r5, r6, r7, r8, r9, r10], &(0x7f0000000d40)=[{0x3, 0x4, 0x0, 0x6}, {0x3, 0x4, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x4}, {0x4, 0x3, 0x9, 0x9}, {0x1, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x5, 0x9985bd89a792095e}, {0x3, 0x3, 0xa, 0xb}, {0x5, 0x3, 0xd}, {0x3, 0x1, 0x9, 0x9}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) kernel console output (not intermixed with test programs): [ 28.884833][ T42] audit: type=1400 audit(1793418416.455:115): avc: denied { siginh } for pid=5688 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:64025' (ED25519) to the list of known hosts. [ 30.909553][ T42] audit: type=1400 audit(1793418418.485:116): avc: denied { name_bind } for pid=5696 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.939759][ T42] audit: type=1400 audit(1793418418.515:117): avc: denied { execute } for pid=5697 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.940094][ T42] audit: type=1400 audit(1793418418.515:118): avc: denied { execute_no_trans } for pid=5697 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.025307][ T42] audit: type=1400 audit(1793418418.595:119): avc: denied { write } for pid=5698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.094472][ T42] audit: type=1400 audit(1793418418.665:120): avc: denied { write } for pid=5701 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.422454][ T42] audit: type=1400 audit(1793418418.995:121): avc: denied { write } for pid=5704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.456273][ T42] audit: type=1400 audit(1793418419.025:122): avc: denied { write } for pid=5707 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.776980][ T42] audit: type=1400 audit(1793418419.355:123): avc: denied { write } for pid=5710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.825948][ T42] audit: type=1400 audit(1793418419.395:124): avc: denied { write } for pid=5713 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.443546][ T42] audit: type=1400 audit(1793418420.015:125): avc: denied { write } for pid=5716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.294342][ T5697] cgroup: Unknown subsys name 'net' [ 33.419907][ T5697] cgroup: Unknown subsys name 'cpuset' [ 33.424039][ T5697] cgroup: Unknown subsys name 'rlimit' [ 33.641465][ T5756] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.430723][ T5697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.789114][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 37.789132][ T42] audit: type=1400 audit(1793418425.365:154): avc: denied { execmem } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.942678][ T42] audit: type=1400 audit(1793418425.515:155): avc: denied { create } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.944944][ T42] audit: type=1400 audit(1793418425.515:156): avc: denied { read write } for pid=5781 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.944982][ T42] audit: type=1400 audit(1793418425.515:157): avc: denied { open } for pid=5781 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.951944][ T42] audit: type=1400 audit(1793418425.525:158): avc: denied { ioctl } for pid=5781 comm="syz-executor" path="socket:[7256]" dev="sockfs" ino=7256 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.968356][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.988326][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.989110][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.989543][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.995790][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.998030][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.998330][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.998666][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.998889][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.999326][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.999407][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.999450][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.000632][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.000793][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.001361][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.001436][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.002772][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.004851][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.005425][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.007374][ T42] audit: type=1400 audit(1793418425.585:159): avc: denied { read } for pid=5781 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.013168][ T42] audit: type=1400 audit(1793418425.585:160): avc: denied { open } for pid=5789 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.015458][ T42] audit: type=1400 audit(1793418425.585:161): avc: denied { mounton } for pid=5781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.018189][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.020964][ T42] audit: type=1400 audit(1793418425.595:162): avc: denied { module_request } for pid=5781 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.057607][ T42] audit: type=1400 audit(1793418425.635:163): avc: denied { sys_module } for pid=5781 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.210798][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.211560][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.215403][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.241213][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.248438][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.254358][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.335521][ T5781] infiniband rxe0: set active [ 38.338110][ T5781] infiniband rxe0: added rxe_eth0 [ 38.348382][ T1538] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.351660][ T5781] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 38.351678][ T5781] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 38.351698][ T5781] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 38.371693][ T5781] RDS/IB: rxe0: added [ 38.371808][ T5781] smc: adding ib device rxe0 with port count 1 [ 38.371842][ T5781] smc: ib device rxe0 port 1 has no pnetid [ 38.384426][ T1538] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.392484][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.501084][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.613884][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.689488][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.689536][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.689698][ T5790] bridge_slave_0: entered allmulticast mode [ 38.690500][ T5790] bridge_slave_0: entered promiscuous mode [ 38.699114][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.699184][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.699301][ T5785] bridge_slave_0: entered allmulticast mode [ 38.700758][ T5785] bridge_slave_0: entered promiscuous mode [ 38.703511][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.703578][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.703666][ T5785] bridge_slave_1: entered allmulticast mode [ 38.704993][ T5785] bridge_slave_1: entered promiscuous mode [ 38.706175][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.706242][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.706324][ T5790] bridge_slave_1: entered allmulticast mode [ 38.707575][ T5790] bridge_slave_1: entered promiscuous mode [ 38.759007][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.759115][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.759367][ T5789] bridge_slave_0: entered allmulticast mode [ 38.760514][ T5789] bridge_slave_0: entered promiscuous mode [ 38.761865][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.762148][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.762209][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.762261][ T5789] bridge_slave_1: entered allmulticast mode [ 38.763001][ T5789] bridge_slave_1: entered promiscuous mode [ 38.771345][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.773732][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.775482][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.799430][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.801277][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.803701][ T5785] team0: Port device team_slave_0 added [ 38.813170][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.820154][ T5785] team0: Port device team_slave_1 added [ 38.821099][ T5790] team0: Port device team_slave_0 added [ 38.840316][ T5790] team0: Port device team_slave_1 added [ 38.847133][ T5789] team0: Port device team_slave_0 added [ 38.847715][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.847724][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.847738][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.857403][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.857414][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.857429][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.858953][ T5789] team0: Port device team_slave_1 added [ 38.898180][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.898196][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.898215][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.899296][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.899304][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.899316][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.924676][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.924686][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.924698][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.929015][ T5785] hsr_slave_0: entered promiscuous mode [ 38.929731][ T5785] hsr_slave_1: entered promiscuous mode [ 38.930940][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.930951][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.930970][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.037823][ T5789] hsr_slave_0: entered promiscuous mode [ 39.038405][ T5789] hsr_slave_1: entered promiscuous mode [ 39.038758][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 39.038803][ T5789] Cannot create hsr debugfs directory [ 39.042413][ T5790] hsr_slave_0: entered promiscuous mode [ 39.043051][ T5790] hsr_slave_1: entered promiscuous mode [ 39.043341][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 39.043352][ T5790] Cannot create hsr debugfs directory [ 39.338996][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.344041][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.353661][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.355563][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.372243][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.375228][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.381308][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.384554][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.398999][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.399042][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.399194][ T5781] bridge_slave_0: entered allmulticast mode [ 39.399893][ T5781] bridge_slave_0: entered promiscuous mode [ 39.401362][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.401512][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.401832][ T5781] bridge_slave_1: entered allmulticast mode [ 39.403005][ T5781] bridge_slave_1: entered promiscuous mode [ 39.425642][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.430695][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.445831][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.449408][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.449992][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.452271][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.459801][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.459894][ T5785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.460309][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.460391][ T5785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.464197][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.469412][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.470184][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.473874][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.474944][ T5781] team0: Port device team_slave_0 added [ 39.478708][ T5781] team0: Port device team_slave_1 added [ 39.508538][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.509199][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.529446][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.529456][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.529468][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.538034][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.538048][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.538067][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.573709][ T5781] hsr_slave_0: entered promiscuous mode [ 39.574200][ T5781] hsr_slave_1: entered promiscuous mode [ 39.574492][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 39.574503][ T5781] Cannot create hsr debugfs directory [ 39.577450][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.580927][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.581412][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.585261][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.586107][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.589552][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.591273][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.595025][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.699316][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.742756][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.751137][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.769190][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.769281][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.788410][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.788497][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.790766][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.809986][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.810068][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.819027][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.822494][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.823427][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.831977][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.834167][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.834233][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.840737][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.843636][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.844678][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.849564][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.857662][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.885414][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.903497][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.903554][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.920873][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.920918][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.998339][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.023033][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.031537][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.031616][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.037557][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.037621][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.067789][ T5784] Bluetooth: hci2: command tx timeout [ 40.067796][ T5793] Bluetooth: hci1: command tx timeout [ 40.067800][ T5792] Bluetooth: hci0: command tx timeout [ 40.068217][ T66] Bluetooth: hci3: command tx timeout [ 40.132556][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.163311][ T5785] veth0_vlan: entered promiscuous mode [ 40.173572][ T5785] veth1_vlan: entered promiscuous mode [ 40.188600][ T5785] veth0_macvtap: entered promiscuous mode [ 40.192414][ T5785] veth1_macvtap: entered promiscuous mode [ 40.209488][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.214189][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.218842][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.234422][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.297462][ T5790] veth0_vlan: entered promiscuous mode [ 40.305059][ T5789] veth0_vlan: entered promiscuous mode [ 40.308506][ T1657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.308522][ T1657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.311175][ T5789] veth1_vlan: entered promiscuous mode [ 40.322774][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.339187][ T5790] veth1_vlan: entered promiscuous mode [ 40.341440][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.341451][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.355240][ T5789] veth0_macvtap: entered promiscuous mode [ 40.363589][ T5789] veth1_macvtap: entered promiscuous mode [ 40.384874][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.389990][ T5790] veth0_macvtap: entered promiscuous mode [ 40.395416][ T5790] veth1_macvtap: entered promiscuous mode [ 40.401164][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.403638][ T5781] veth0_vlan: entered promiscuous mode [ 40.412780][ T5781] veth1_vlan: entered promiscuous mode [ 40.415437][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.429371][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.431097][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.479817][ T5781] veth0_macvtap: entered promiscuous mode [ 40.498303][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.498323][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.505231][ T5781] veth1_macvtap: entered promiscuous mode [ 40.535665][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.535682][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.562127][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.562140][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.568423][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568792][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568812][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568830][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568847][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568864][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568881][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568898][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568915][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568971][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568989][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.569006][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.570570][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.591559][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.594864][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.594880][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.649064][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.660604][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.660620][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.667108][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.677011][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.677027][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.697649][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.697684][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.811718][ T5951] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 40.825015][ T5953] gfs2: error -5 reading superblock [ 40.851373][ T5953] FAULT_INJECTION: forcing a failure. [ 40.851373][ T5953] name failslab, interval 1, probability 0, space 0, times 1 [ 40.851400][ T5953] CPU: 3 UID: 0 PID: 5953 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 40.851420][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.851431][ T5953] Call Trace: [ 40.851437][ T5953] [ 40.851444][ T5953] dump_stack_lvl+0x100/0x190 [ 40.851479][ T5953] should_fail_ex.cold+0x5/0xa [ 40.851509][ T5953] should_failslab+0xc2/0x120 [ 40.851531][ T5953] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 40.851560][ T5953] ? sidtab_sid2str_get+0x84/0x670 [ 40.851590][ T5953] ? sidtab_sid2str_get+0x17a/0x670 [ 40.851623][ T5953] kmemdup_noprof+0x29/0x60 [ 40.851644][ T5953] sidtab_sid2str_get+0x17a/0x670 [ 40.851681][ T5953] security_sid_to_context_core+0x373/0x700 [ 40.851709][ T5953] avc_audit_post_callback+0x1aa/0x910 [ 40.851737][ T5953] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 40.851766][ T5953] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 40.851794][ T5953] ? skb_put+0x138/0x180 [ 40.851818][ T5953] ? audit_log_n_string+0x2ac/0x5b0 [ 40.851852][ T5953] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 40.851880][ T5953] common_lsm_audit+0x23f/0x2b0 [ 40.851908][ T5953] ? __pfx_common_lsm_audit+0x10/0x10 [ 40.851934][ T5953] ? avc_denied+0x14a/0x190 [ 40.851959][ T5953] slow_avc_audit+0x186/0x210 [ 40.851979][ T5953] ? __pfx_slow_avc_audit+0x10/0x10 [ 40.851999][ T5953] ? find_held_lock+0x2b/0x80 [ 40.852018][ T5953] ? avc_has_perm_noaudit+0x359/0x470 [ 40.852048][ T5953] cred_has_capability.isra.0+0x2b2/0x300 [ 40.852071][ T5953] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 40.852094][ T5953] ? audit_log_end+0x24/0x30 [ 40.852116][ T5953] ? hook_capable+0x1bc/0x500 [ 40.852137][ T5953] ? common_lsm_audit+0x251/0x2b0 [ 40.852164][ T5953] ? rcu_is_watching+0x13/0xc0 [ 40.852185][ T5953] ? cap_capable+0x107/0x430 [ 40.852209][ T5953] security_capable+0x13b/0x260 [ 40.852232][ T5953] ns_capable+0x6c/0xf0 [ 40.852253][ T5953] bpf_token_capable+0xa0/0x140 [ 40.852277][ T5953] bpf_prog_load+0x1ff/0x2b20 [ 40.852312][ T5953] ? __pfx_bpf_prog_load+0x10/0x10 [ 40.852339][ T5953] ? avc_has_perm+0x1b1/0x1e0 [ 40.852377][ T5953] __sys_bpf+0x146f/0x4b60 [ 40.852413][ T5953] ? __pfx___sys_bpf+0x10/0x10 [ 40.852439][ T5953] ? find_held_lock+0x2b/0x80 [ 40.852457][ T5953] ? futex_wake+0x4ea/0x5e0 [ 40.852525][ T5953] ? __x64_sys_futex+0x34f/0x4d0 [ 40.852545][ T5953] ? __x64_sys_futex+0x358/0x4d0 [ 40.852590][ T5953] ? xfd_validate_state+0x129/0x190 [ 40.852619][ T5953] ? __x64_sys_bpf+0xce/0x140 [ 40.852635][ T5953] __x64_sys_bpf+0xce/0x140 [ 40.852660][ T5953] ? do_syscall_64+0xae/0x790 [ 40.852691][ T5953] do_syscall_64+0x123/0x790 [ 40.852722][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.852742][ T5953] RIP: 0033:0x7f6d4bf9f559 [ 40.852759][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.852777][ T5953] RSP: 002b:00007f6d4cf48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.852794][ T5953] RAX: ffffffffffffffda RBX: 00007f6d4c225fa0 RCX: 00007f6d4bf9f559 [ 40.852806][ T5953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 40.852816][ T5953] RBP: 00007f6d4c036b50 R08: 0000000000000000 R09: 0000000000000000 [ 40.852827][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.852838][ T5953] R13: 00007f6d4c226038 R14: 00007f6d4c225fa0 R15: 00007ffdd956a6b8 [ 40.852867][ T5953] [ 40.866139][ T5955] fuse: Unknown parameter 'fdë¡´öÁùÿÿÿÿÿÿÿá}' [ 40.929631][ T5951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5951 comm=syz.2.3 [ 40.939132][ T5960] ip_tables: iptables: counters copy to user failed while replacing table [ 40.941744][ T5960] ip_tables: iptables: counters copy to user failed while replacing table [ 40.943960][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 41.009394][ T5951] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 41.009413][ T5951] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 41.009423][ T5951] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 41.009432][ T5951] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 41.009443][ T5951] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 41.009452][ T5951] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 41.009529][ T5951] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 41.071969][ T5956] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 42.146864][ T5784] Bluetooth: hci1: command tx timeout [ 42.147488][ T5793] Bluetooth: hci0: command tx timeout [ 42.154867][ T5784] Bluetooth: hci2: command tx timeout [ 42.493744][ T5989] [ 42.494844][ T5989] ============================= [ 42.496941][ T5989] WARNING: suspicious RCU usage [ 42.499013][ T5989] syzkaller #0 Not tainted [ 42.501011][ T5989] ----------------------------- [ 42.502979][ T5989] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 42.506369][ T5989] [ 42.506369][ T5989] other info that might help us debug this: [ 42.506369][ T5989] [ 42.510777][ T5989] [ 42.510777][ T5989] rcu_scheduler_active = 2, debug_locks = 1 [ 42.513951][ T5989] locks held by syz.3.15/5989: 1, last CPU#0: [ 42.516294][ T5989] #0: ffffffff8ffea4f8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: bpf_prog_test_run_syscall+0x301/0xb30 [ 42.520922][ T5989] [ 42.520922][ T5989] stack backtrace: [ 42.523227][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT(full) [ 42.526810][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.530799][ T5989] Call Trace: [ 42.532219][ T5989] [ 42.533482][ T5989] dump_stack_lvl+0x100/0x190 [ 42.535388][ T5989] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 42.537536][ T5989] get_callchain_entry+0x278/0x3f0 [ 42.539615][ T5989] get_perf_callchain+0x2d6/0x9c0 [ 42.541710][ T5989] ? finish_task_switch.isra.0+0x250/0x10d0 [ 42.544195][ T5989] ? __pfx_get_perf_callchain+0x10/0x10 [ 42.546410][ T5989] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 42.548625][ T5989] ? rcu_is_watching+0x13/0xc0 [ 42.550671][ T5989] __bpf_get_stack+0x34a/0x7f0 [ 42.552695][ T5989] ? __pfx___bpf_get_stack+0x10/0x10 [ 42.554920][ T5989] bpf_get_stack_raw_tp+0x1dd/0x280 [ 42.556962][ T5989] bpf_prog_33198c9320b70387_F+0x2f/0x35 [ 42.559232][ T5989] bpf_prog_0f401ca562e3309f+0x21/0x2e [ 42.561438][ T5989] bpf_prog_test_run_syscall+0x4ba/0xb30 [ 42.563763][ T5989] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 42.566038][ T5989] ? fput+0x7c/0x100 [ 42.567520][ T5989] ? __bpf_prog_get+0x97/0x290 [ 42.569345][ T5989] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 42.571747][ T5989] __sys_bpf+0x1d13/0x4b60 [ 42.573449][ T5989] ? __pfx___sys_bpf+0x10/0x10 [ 42.575220][ T5989] ? find_held_lock+0x2b/0x80 [ 42.577142][ T5989] ? futex_wake+0x4ea/0x5e0 [ 42.579064][ T5989] ? putname+0xb1/0x110 [ 42.580751][ T5989] ? __x64_sys_futex+0x34f/0x4d0 [ 42.582794][ T5989] ? __x64_sys_futex+0x358/0x4d0 [ 42.584802][ T5989] ? __pfx___x64_sys_futex+0x10/0x10 [ 42.586932][ T5989] ? __x64_sys_bpf+0xce/0x140 [ 42.588829][ T5989] __x64_sys_bpf+0xce/0x140 [ 42.590746][ T5989] ? do_syscall_64+0xae/0x790 [ 42.592706][ T5989] do_syscall_64+0x123/0x790 [ 42.594653][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.597057][ T5989] RIP: 0033:0x7f900019f559 [ 42.598909][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.606550][ T5989] RSP: 002b:00007f9001002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.609894][ T5989] RAX: ffffffffffffffda RBX: 00007f9000425fa0 RCX: 00007f900019f559 [ 42.613047][ T5989] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 42.616082][ T5989] RBP: 00007f9000236b50 R08: 0000000000000000 R09: 0000000000000000 [ 42.619073][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.622235][ T5989] R13: 00007f9000426038 R14: 00007f9000425fa0 R15: 00007ffe726d5e98 [ 42.625371][ T5989] [ 42.634294][ T5951] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.836829][ T66] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 44.227413][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 44.236850][ T66] Bluetooth: hci2: command tx timeout [ 44.236879][ T66] Bluetooth: hci1: command tx timeout [ 46.307056][ T5784] Bluetooth: hci1: command tx timeout [ 46.307087][ T5784] Bluetooth: hci2: command tx timeout [ 46.307106][ T5784] Bluetooth: hci0: command 0x040f tx timeout [ 48.386865][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 49.604702][ T5935] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.631538][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 49.631551][ T42] audit: type=1400 audit(1793418437.205:244): avc: denied { write } for pid=5991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.677861][ T42] audit: type=1400 audit(1793418437.255:245): avc: denied { write } for pid=5994 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1