last executing test programs: 15.819861733s ago: executing program 2 (id=53): socket$kcm(0x21, 0x2, 0x2) socket(0x10, 0x803, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.213331055s ago: executing program 4 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce51", 0x27}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) accept$alg(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 14.910473334s ago: executing program 3 (id=59): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000280), 0x8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @mcast1, 0x7}, 0x1c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14.891809004s ago: executing program 4 (id=60): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 14.779536379s ago: executing program 2 (id=61): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000013a00), 0x6, 0x24004040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x32315241, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.955229355s ago: executing program 3 (id=63): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8, @rand_addr=' \x01\x00', 0xffffffff}]}, &(0x7f0000000240)=0xfd3a) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) 13.342695931s ago: executing program 1 (id=64): dup(0xffffffffffffffff) open(0x0, 0x38d4c0, 0x5c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x1e1242, 0xfe) sendfile(r3, r3, 0x0, 0x6) 13.213863748s ago: executing program 0 (id=65): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2ac02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a00000085000000220000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r0, &(0x7f0000000240)=""/183, 0xb7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.780436355s ago: executing program 4 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(r3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 11.329914142s ago: executing program 1 (id=67): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 10.269865304s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x18}, 0x48) 9.85105581s ago: executing program 2 (id=69): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) brk(0x200000ffc000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32, @ANYBLOB="0c0099"], 0x70}}, 0x880) 9.820050567s ago: executing program 3 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xaa3a6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 8.166946347s ago: executing program 3 (id=71): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x0, 0x0, 0x2) 7.914918819s ago: executing program 2 (id=72): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.903718144s ago: executing program 1 (id=73): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000004c0)={0x3, 0x2, 0x2, 0x0, 0x6}) 7.734051224s ago: executing program 0 (id=74): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 7.017253316s ago: executing program 4 (id=75): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffffffffffffffe) 5.129708944s ago: executing program 0 (id=76): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) 4.374840323s ago: executing program 4 (id=77): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) mount(&(0x7f0000000080)=@filename='configfs\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@migrate={0xa0, 0x21, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e22, 0x7, 0x4e20, 0x0, 0x2, 0x40, 0x80, 0xff}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private1, @in6=@private0, @in6=@loopback, @in=@local, 0x3c, 0x1, 0x0, 0x3500, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) 4.335437329s ago: executing program 1 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300"], 0x0, 0x5a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00080, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 4.246173536s ago: executing program 2 (id=79): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x4ac5, &(0x7f00000001c0)={0x0, 0x5acf, 0x1000, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020}, 0x2020) 3.091341668s ago: executing program 3 (id=80): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='n\x00', 0x2) 3.056787121s ago: executing program 0 (id=81): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.622909724s ago: executing program 1 (id=82): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x10, 0x1, 0x3, "7e0efeac3d4fd6e0c46a2ca55aab2500b482b200f475a8f64100", 0x47425247}) 1.458279421s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 1.277737008s ago: executing program 1 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/tracing/instances/B/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(0xffffffffffffffff) 1.177743027s ago: executing program 2 (id=85): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x4}}, 0x9) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.063479192s ago: executing program 0 (id=86): ioctl$TCSETSW2(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 0s ago: executing program 0 (id=87): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) ioprio_get$pid(0x1, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) kernel console output (not intermixed with test programs): [ 55.765364][ T29] audit: type=1400 audit(1786034132.709:106): avc: denied { transition } for pid=5436 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.788331][ T29] audit: type=1400 audit(1786034132.709:107): avc: denied { noatsecure } for pid=5436 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.808382][ T29] audit: type=1400 audit(1786034132.709:108): avc: denied { write } for pid=5436 comm="sh" path="pipe:[4331]" dev="pipefs" ino=4331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 55.851475][ T29] audit: type=1400 audit(1786034132.709:109): avc: denied { rlimitinh } for pid=5436 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.873444][ T29] audit: type=1400 audit(1786034132.709:110): avc: denied { siginh } for pid=5436 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 57.714368][ T29] audit: type=1400 audit(1786034134.659:111): avc: denied { write } for pid=5445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.797879][ T29] audit: type=1400 audit(1786034134.739:112): avc: denied { write } for pid=5456 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.479398][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 59.479414][ T29] audit: type=1400 audit(1786034136.419:123): avc: denied { write } for pid=5530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.529407][ T29] audit: type=1400 audit(1786034136.469:124): avc: denied { write } for pid=5541 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.729579][ T29] audit: type=1400 audit(1786034136.669:125): avc: denied { write } for pid=5544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.783817][ T29] audit: type=1400 audit(1786034136.719:126): avc: denied { write } for pid=5555 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.005201][ T29] audit: type=1400 audit(1786034136.949:127): avc: denied { write } for pid=5559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.071777][ T29] audit: type=1400 audit(1786034137.019:128): avc: denied { write } for pid=5570 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 66.382064][ T29] audit: type=1400 audit(1786034143.329:129): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.405862][ T29] audit: type=1400 audit(1786034143.349:130): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.409163][ T5580] cgroup: Unknown subsys name 'net' [ 66.436532][ T29] audit: type=1400 audit(1786034143.379:131): avc: denied { unmount } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.554211][ T5580] cgroup: Unknown subsys name 'cpuset' [ 66.562562][ T5580] cgroup: Unknown subsys name 'rlimit' [ 66.663584][ T29] audit: type=1400 audit(1786034143.609:132): avc: denied { setattr } for pid=5580 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.698045][ T29] audit: type=1400 audit(1786034143.609:133): avc: denied { create } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.731646][ T29] audit: type=1400 audit(1786034143.609:134): avc: denied { write } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.752333][ T29] audit: type=1400 audit(1786034143.609:135): avc: denied { read } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.772990][ T29] audit: type=1400 audit(1786034143.619:136): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.798084][ T29] audit: type=1400 audit(1786034143.619:137): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.814564][ T5582] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.830602][ T29] audit: type=1400 audit(1786034143.769:138): avc: denied { relabelto } for pid=5582 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.794480][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.838079][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.852362][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.860558][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.868645][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.877859][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.886029][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.891941][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.895091][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.902025][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.909014][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.922225][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.922492][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.931634][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.937910][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.944165][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.952304][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.958104][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.964880][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.978039][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.996039][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.005594][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.019087][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.026571][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.036247][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.043784][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.073554][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.080265][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.473450][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.480800][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.490211][ T5601] bridge_slave_0: entered allmulticast mode [ 71.497088][ T5601] bridge_slave_0: entered promiscuous mode [ 71.527122][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534278][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.541352][ T5601] bridge_slave_1: entered allmulticast mode [ 71.548380][ T5601] bridge_slave_1: entered promiscuous mode [ 71.566299][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.573423][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.580519][ T5592] bridge_slave_0: entered allmulticast mode [ 71.587470][ T5592] bridge_slave_0: entered promiscuous mode [ 71.615968][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.623088][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.630169][ T5605] bridge_slave_0: entered allmulticast mode [ 71.637374][ T5605] bridge_slave_0: entered promiscuous mode [ 71.644225][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.651287][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.658605][ T5592] bridge_slave_1: entered allmulticast mode [ 71.665323][ T5592] bridge_slave_1: entered promiscuous mode [ 71.695182][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.702394][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.709470][ T5605] bridge_slave_1: entered allmulticast mode [ 71.716349][ T5605] bridge_slave_1: entered promiscuous mode [ 71.729570][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.736689][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.743967][ T5595] bridge_slave_0: entered allmulticast mode [ 71.750810][ T5595] bridge_slave_0: entered promiscuous mode [ 71.760091][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.794501][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.801612][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.808670][ T5595] bridge_slave_1: entered allmulticast mode [ 71.815601][ T5595] bridge_slave_1: entered promiscuous mode [ 71.823907][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.853984][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.885999][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.897103][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.916516][ T5601] team0: Port device team_slave_0 added [ 71.931997][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.950218][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.961077][ T5601] team0: Port device team_slave_1 added [ 71.974261][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.981781][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.988874][ T5593] bridge_slave_0: entered allmulticast mode [ 71.995840][ T5593] bridge_slave_0: entered promiscuous mode [ 72.018451][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.022247][ T5607] Bluetooth: hci2: command tx timeout [ 72.027773][ T5611] Bluetooth: hci1: command tx timeout [ 72.033511][ T49] Bluetooth: hci0: command tx timeout [ 72.038904][ T5602] Bluetooth: hci4: command tx timeout [ 72.062842][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.069979][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.077286][ T5593] bridge_slave_1: entered allmulticast mode [ 72.084217][ T5593] bridge_slave_1: entered promiscuous mode [ 72.099148][ T5592] team0: Port device team_slave_0 added [ 72.104763][ T5602] Bluetooth: hci3: command tx timeout [ 72.118274][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.125277][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.151414][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.171118][ T5605] team0: Port device team_slave_0 added [ 72.182315][ T5592] team0: Port device team_slave_1 added [ 72.189416][ T5595] team0: Port device team_slave_0 added [ 72.195887][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.202849][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.229083][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.248659][ T5605] team0: Port device team_slave_1 added [ 72.262824][ T5595] team0: Port device team_slave_1 added [ 72.276504][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.317315][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.334667][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.342043][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.368540][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.381073][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.388207][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.414139][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.432526][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.439504][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.465608][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.477256][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.484230][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.510118][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.528469][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.535484][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.561646][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.585902][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.592876][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.619030][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.647505][ T5601] hsr_slave_0: entered promiscuous mode [ 72.653643][ T5601] hsr_slave_1: entered promiscuous mode [ 72.663296][ T5593] team0: Port device team_slave_0 added [ 72.686002][ T5593] team0: Port device team_slave_1 added [ 72.755231][ T5595] hsr_slave_0: entered promiscuous mode [ 72.761262][ T5595] hsr_slave_1: entered promiscuous mode [ 72.767346][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 72.773337][ T5595] Cannot create hsr debugfs directory [ 72.786618][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.793816][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.819910][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.835143][ T5592] hsr_slave_0: entered promiscuous mode [ 72.841204][ T5592] hsr_slave_1: entered promiscuous mode [ 72.847273][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 72.853017][ T5592] Cannot create hsr debugfs directory [ 72.877129][ T5605] hsr_slave_0: entered promiscuous mode [ 72.883465][ T5605] hsr_slave_1: entered promiscuous mode [ 72.889623][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 72.895378][ T5605] Cannot create hsr debugfs directory [ 72.901867][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.908843][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.934726][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.073553][ T5593] hsr_slave_0: entered promiscuous mode [ 73.079625][ T5593] hsr_slave_1: entered promiscuous mode [ 73.085674][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 73.091386][ T5593] Cannot create hsr debugfs directory [ 73.403472][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.414722][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.422766][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.433276][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.449267][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.458447][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.466395][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.475979][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.536643][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.547174][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.555025][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.565447][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.573147][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.581795][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.589455][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.598152][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.676818][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.687628][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.696123][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.704797][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.712892][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.722098][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.730339][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.739234][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.835051][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.843859][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.860338][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.870324][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.878733][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.887356][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.895459][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.904217][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.950531][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.987720][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.019789][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.039439][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.048692][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.057900][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.066972][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.075878][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.084765][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.101557][ T5611] Bluetooth: hci1: command tx timeout [ 74.105043][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.107216][ T5602] Bluetooth: hci4: command tx timeout [ 74.114331][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.115602][ T49] Bluetooth: hci0: command tx timeout [ 74.120080][ T5611] Bluetooth: hci2: command tx timeout [ 74.133941][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.147683][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.167235][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.174538][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.181495][ T5611] Bluetooth: hci3: command tx timeout [ 74.192066][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.221333][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.228410][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.249880][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.256987][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.272567][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.339398][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.368781][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.375939][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.399334][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.406506][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 74.406520][ T29] audit: type=1400 audit(1786034151.339:154): avc: denied { sys_module } for pid=5601 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.474808][ T5595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.485867][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.509311][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.523833][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.530961][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.577085][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.584245][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.615472][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.622571][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.767375][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.834154][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.878620][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.885810][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.946555][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.953707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.198040][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.425311][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.597269][ T5595] veth0_vlan: entered promiscuous mode [ 75.629646][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.668803][ T5595] veth1_vlan: entered promiscuous mode [ 75.780157][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.823438][ T5595] veth0_macvtap: entered promiscuous mode [ 75.836894][ T5605] veth0_vlan: entered promiscuous mode [ 75.855678][ T5595] veth1_macvtap: entered promiscuous mode [ 75.901156][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.915464][ T5605] veth1_vlan: entered promiscuous mode [ 75.931049][ T5601] veth0_vlan: entered promiscuous mode [ 75.946046][ T5601] veth1_vlan: entered promiscuous mode [ 75.981061][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.001367][ T5592] veth0_vlan: entered promiscuous mode [ 76.025101][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.036793][ T5592] veth1_vlan: entered promiscuous mode [ 76.070963][ T5601] veth0_macvtap: entered promiscuous mode [ 76.078235][ T5605] veth0_macvtap: entered promiscuous mode [ 76.088800][ T5593] veth0_vlan: entered promiscuous mode [ 76.098595][ T5605] veth1_macvtap: entered promiscuous mode [ 76.109277][ T5601] veth1_macvtap: entered promiscuous mode [ 76.134191][ T5593] veth1_vlan: entered promiscuous mode [ 76.153506][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.179223][ T5592] veth0_macvtap: entered promiscuous mode [ 76.183315][ T5602] Bluetooth: hci4: command tx timeout [ 76.185399][ T5607] Bluetooth: hci1: command tx timeout [ 76.190320][ T5611] Bluetooth: hci2: command tx timeout [ 76.195741][ T49] Bluetooth: hci0: command tx timeout [ 76.218122][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.227337][ T5592] veth1_macvtap: entered promiscuous mode [ 76.236394][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.255348][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.262189][ T5611] Bluetooth: hci3: command tx timeout [ 76.294185][ T5593] veth0_macvtap: entered promiscuous mode [ 76.310946][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.319691][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.342757][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.350380][ T5593] veth1_macvtap: entered promiscuous mode [ 76.363123][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.373908][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.411279][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.445802][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.457479][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.466673][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.532647][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.538792][ T29] audit: type=1400 audit(1786034153.479:155): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.6jgekX/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.567455][ T29] audit: type=1400 audit(1786034153.489:156): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.596632][ T29] audit: type=1400 audit(1786034153.489:157): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.6jgekX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.628164][ T29] audit: type=1400 audit(1786034153.489:158): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.653984][ T29] audit: type=1400 audit(1786034153.499:159): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.6jgekX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.685894][ T29] audit: type=1400 audit(1786034153.499:160): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.6jgekX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.717135][ T29] audit: type=1400 audit(1786034153.509:161): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.717780][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.737105][ T29] audit: type=1400 audit(1786034153.509:162): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.737153][ T29] audit: type=1400 audit(1786034153.519:163): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="gadgetfs" ino=6967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.753874][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.779341][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.812372][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.834476][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.842488][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.932193][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.941926][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.957024][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.043308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.067299][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.306496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.314425][ T184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314480][ T184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314526][ T184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314560][ T184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314595][ T184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314629][ T184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314663][ T184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330472][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.639612][ T5794] Zero length message leads to an empty skb [ 77.665308][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676105][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.702931][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.710158][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.857038][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.865982][ T3291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.876245][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.883937][ T3291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.986137][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.030669][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.046205][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.082045][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.232693][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.262639][ T5611] Bluetooth: hci1: command tx timeout [ 78.262775][ T5602] Bluetooth: hci0: command tx timeout [ 78.268110][ T5607] Bluetooth: hci2: command tx timeout [ 78.273630][ T5602] Bluetooth: hci4: command tx timeout [ 78.281956][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 78.290825][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.322638][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.338655][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 78.348602][ T5602] Bluetooth: hci3: command tx timeout [ 78.348662][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.349613][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.398703][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.430451][ T9] usb 3-1: Product: syz [ 78.445775][ T9] usb 3-1: Manufacturer: syz [ 78.490460][ T9] usb 3-1: SerialNumber: syz [ 78.865982][ T5806] kvm: kvm [5804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 79.542305][ T5806] kvm: kvm [5804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 80.160561][ T9] usb 3-1: config 0 descriptor?? [ 80.174413][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.184661][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 80.417988][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 80.418005][ T29] audit: type=1400 audit(1786034157.359:203): avc: denied { setopt } for pid=5821 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.455270][ T5819] Process accounting resumed [ 80.526550][ T29] audit: type=1400 audit(1786034157.429:204): avc: denied { create } for pid=5826 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.546028][ T29] audit: type=1400 audit(1786034157.449:205): avc: denied { read } for pid=5821 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.567589][ T29] audit: type=1400 audit(1786034157.459:206): avc: denied { mmap_zero } for pid=5826 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 80.610872][ T29] audit: type=1400 audit(1786034157.549:207): avc: denied { map } for pid=5826 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.686890][ T5830] xt_hashlimit: size too large, truncated to 1048576 [ 80.991335][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 81.109276][ T29] audit: type=1400 audit(1786034157.549:208): avc: denied { read write } for pid=5826 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.181883][ T29] audit: type=1400 audit(1786034157.549:209): avc: denied { map } for pid=5826 comm="syz.0.9" path="socket:[8534]" dev="sockfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.740743][ T5836] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 81.750018][ T29] audit: type=1400 audit(1786034157.619:210): avc: denied { create } for pid=5823 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.801914][ T5838] Line length is too long: Should be less than 4094 [ 81.813981][ T29] audit: type=1400 audit(1786034157.629:211): avc: denied { setopt } for pid=5823 comm="syz.4.11" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.855297][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.865029][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.865130][ T9] em28xx 3-1:0.0: board has no eeprom [ 81.913895][ T29] audit: type=1400 audit(1786034157.809:212): avc: denied { create } for pid=5826 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.962498][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.004661][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.053623][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.201469][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 82.217775][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 82.242997][ T5718] em28xx 3-1:0.0: Binding DVB extension [ 82.300954][ T9] usb 3-1: USB disconnect, device number 2 [ 82.374623][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 82.422722][ T5843] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.461227][ T5847] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 82.554807][ T5718] em28xx 3-1:0.0: Registering input extension [ 82.568200][ T9] em28xx 3-1:0.0: Closing input extension [ 82.701950][ T9] em28xx 3-1:0.0: Freeing device [ 82.870766][ T5856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18'. [ 86.298098][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 86.298110][ T29] audit: type=1400 audit(1786034163.239:269): avc: denied { create } for pid=5870 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.329691][ T24] cfg80211: failed to load regulatory.db [ 87.354205][ T29] audit: type=1400 audit(1786034163.549:270): avc: denied { create } for pid=5873 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.255859][ T29] audit: type=1400 audit(1786034163.739:271): avc: denied { bind } for pid=5875 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.347117][ T29] audit: type=1400 audit(1786034163.739:272): avc: denied { node_bind } for pid=5875 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 88.467848][ T29] audit: type=1400 audit(1786034163.739:273): avc: denied { connect } for pid=5875 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.972108][ T29] audit: type=1400 audit(1786034163.749:274): avc: denied { write } for pid=5875 comm="syz.0.25" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.289537][ T29] audit: type=1400 audit(1786034164.129:275): avc: denied { write } for pid=5870 comm="syz.1.26" path="socket:[8615]" dev="sockfs" ino=8615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 90.051437][ T29] audit: type=1400 audit(1786034166.219:276): avc: denied { setopt } for pid=5896 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.071681][ T29] audit: type=1400 audit(1786034166.759:277): avc: denied { bind } for pid=5896 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.090786][ T29] audit: type=1400 audit(1786034166.769:278): avc: denied { write } for pid=5896 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.581598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.717719][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 92.717735][ T29] audit: type=1400 audit(1786034169.659:284): avc: denied { ioctl } for pid=5906 comm="syz.2.32" path="socket:[8663]" dev="sockfs" ino=8663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.731159][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 92.848465][ T29] audit: type=1400 audit(1786034169.659:285): avc: denied { bind } for pid=5906 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.916476][ T29] audit: type=1400 audit(1786034169.659:286): avc: denied { setopt } for pid=5906 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.098776][ T29] audit: type=1400 audit(1786034169.659:287): avc: denied { append } for pid=5906 comm="syz.2.32" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.664386][ T29] audit: type=1400 audit(1786034169.669:288): avc: denied { read write } for pid=5906 comm="syz.2.32" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.743984][ T29] audit: type=1400 audit(1786034169.669:289): avc: denied { open } for pid=5906 comm="syz.2.32" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.898893][ T29] audit: type=1400 audit(1786034169.669:290): avc: denied { ioctl } for pid=5906 comm="syz.2.32" path="/dev/video7" dev="devtmpfs" ino=950 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.057525][ T29] audit: type=1400 audit(1786034169.849:291): avc: denied { cmd } for pid=5915 comm="iou-wrk-5916" path="socket:[9611]" dev="sockfs" ino=9611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.080741][ T29] audit: type=1400 audit(1786034170.119:292): avc: denied { create } for pid=5918 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.100198][ T29] audit: type=1400 audit(1786034170.129:293): avc: denied { setopt } for pid=5918 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.336830][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.076514][ T5944] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure [ 98.848677][ T5966] tipc: Started in network mode [ 98.856883][ T5966] tipc: Node identity ea59193148ef, cluster identity 4711 [ 98.873294][ T5966] tipc: Enabled bearer , priority 0 [ 98.949382][ T5959] syzkaller0: entered promiscuous mode [ 98.965250][ T5959] syzkaller0: entered allmulticast mode [ 100.055298][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 100.055313][ T29] audit: type=1400 audit(1786034176.999:299): avc: denied { getopt } for pid=5964 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.060311][ T5598] tipc: Node number set to 2729842993 [ 100.261634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.515445][ T29] audit: type=1400 audit(1786034177.459:300): avc: denied { kexec_image_load } for pid=5971 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 100.715339][ T5959] tipc: Resetting bearer [ 100.803428][ T5979] ======================================================= [ 100.803428][ T5979] WARNING: The mand mount option has been deprecated and [ 100.803428][ T5979] and is ignored by this kernel. Remove the mand [ 100.803428][ T5979] option from the mount to silence this warning. [ 100.803428][ T5979] ======================================================= [ 100.878867][ T29] audit: type=1400 audit(1786034177.779:301): avc: denied { mount } for pid=5975 comm="syz.1.49" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.905450][ T5958] tipc: Resetting bearer [ 101.722710][ T5958] tipc: Disabling bearer [ 102.107014][ T29] audit: type=1400 audit(1786034179.049:302): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.386884][ T29] audit: type=1400 audit(1786034179.209:303): avc: denied { mount } for pid=5984 comm="syz.0.52" name="/" dev="autofs" ino=8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 102.971143][ T29] audit: type=1400 audit(1786034179.439:304): avc: denied { name_connect } for pid=5980 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 102.991272][ T29] audit: type=1400 audit(1786034179.519:305): avc: denied { listen } for pid=5980 comm="syz.2.50" lport=53444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.139404][ T29] audit: type=1400 audit(1786034179.519:306): avc: denied { accept } for pid=5980 comm="syz.2.50" lport=53444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.247780][ T29] audit: type=1400 audit(1786034180.129:307): avc: denied { create } for pid=5993 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.307525][ T29] audit: type=1400 audit(1786034180.149:308): avc: denied { name_bind } for pid=5993 comm="syz.2.53" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 103.416867][ T6002] binder_alloc: 6001: pid 6001 spamming oneway? 1 buffers allocated for a total size of 4096 [ 103.447527][ T6002] binder_alloc: 6001: pid 6001 spamming oneway? 2 buffers allocated for a total size of 5120 [ 103.876854][ T6006] tipc: Started in network mode [ 103.896337][ T6006] tipc: Node identity 1000001, cluster identity 4369 [ 103.923005][ T6006] tipc: Node number set to 16777217 [ 103.956894][ T6006] tipc: Cannot configure node identity twice [ 104.056223][ T6013] bond1: entered promiscuous mode [ 104.069994][ T6013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.104836][ T6011] tipc: New replicast peer: 127.0.0.1 [ 104.114053][ T6011] tipc: Enabled bearer , priority 10 [ 105.065036][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 105.065067][ T29] audit: type=1400 audit(1786034181.989:318): avc: denied { write } for pid=6036 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.544804][ T29] audit: type=1400 audit(1786034181.989:319): avc: denied { nlmsg_write } for pid=6036 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.995272][ T29] audit: type=1400 audit(1786034182.769:320): avc: denied { getopt } for pid=6040 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.114227][ T29] audit: type=1400 audit(1786034182.779:321): avc: denied { name_connect } for pid=6040 comm="syz.3.63" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 107.761934][ T29] audit: type=1400 audit(1786034184.709:322): avc: denied { prog_load } for pid=6052 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.647744][ T29] audit: type=1400 audit(1786034185.589:323): avc: denied { name_bind } for pid=6057 comm="syz.1.67" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.605566][ T29] audit: type=1400 audit(1786034185.609:324): avc: denied { name_connect } for pid=6057 comm="syz.1.67" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.753472][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 110.998787][ T6066] Process accounting paused [ 111.148286][ T29] audit: type=1400 audit(1786034188.089:325): avc: denied { read } for pid=6083 comm="syz.1.73" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.724090][ T29] audit: type=1400 audit(1786034188.179:326): avc: denied { write } for pid=6082 comm="syz.2.72" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.867048][ T29] audit: type=1400 audit(1786034188.179:327): avc: denied { open } for pid=6082 comm="syz.2.72" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.049497][ T29] audit: type=1400 audit(1786034188.249:328): avc: denied { map_create } for pid=6079 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.069401][ T29] audit: type=1400 audit(1786034188.699:329): avc: denied { write } for pid=6034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.661482][ T29] audit: type=1400 audit(1786034188.949:330): avc: denied { write } for pid=6081 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.688873][ T29] audit: type=1400 audit(1786034190.119:331): avc: denied { connect } for pid=6098 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.338710][ T29] audit: type=1400 audit(1786034192.279:332): avc: denied { write } for pid=6111 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.902521][ T29] audit: type=1400 audit(1786034192.459:333): avc: denied { prog_run } for pid=6114 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.992463][ T29] audit: type=1400 audit(1786034192.929:334): avc: denied { map_read map_write } for pid=6123 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.759515][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 117.759532][ T29] audit: type=1400 audit(1786034194.699:337): avc: denied { mounton } for pid=6142 comm="syz.1.84" path="/19/sys/kernel/tracing" dev="sysfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 117.895077][ T29] audit: type=1400 audit(1786034194.709:338): avc: denied { write } for pid=6142 comm="syz.1.84" name="instances" dev="tracefs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.081578][ T29] audit: type=1400 audit(1786034194.709:339): avc: denied { add_name } for pid=6142 comm="syz.1.84" name="A" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.232282][ T6154] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 118.938640][ T29] audit: type=1400 audit(1786034194.709:340): avc: denied { create } for pid=6142 comm="syz.1.84" name="A" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 119.295995][ T29] audit: type=1400 audit(1786034194.859:341): avc: denied { write } for pid=6142 comm="syz.1.84" name="instances" dev="tracefs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 119.316040][ T6143] ------------[ cut here ]------------ [ 119.323925][ T6143] failed to allocate ring buffer on CPU 0 [ 119.330111][ T6143] WARNING: kernel/trace/ring_buffer.c:7976 at trace_rb_cpu_prepare+0x458/0x500, CPU#0: syz.1.84/6143 [ 119.341148][ T6143] Modules linked in: [ 119.345735][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 119.354941][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.365962][ T6143] RIP: 0010:trace_rb_cpu_prepare+0x45a/0x500 [ 119.372365][ T6143] Code: 48 c1 ea 03 80 3c 02 00 0f 84 c7 fc ff ff 48 8b 3c 24 e8 29 0e 6c 00 e9 b9 fc ff ff e8 ff 83 fb ff 48 8d 3d b8 4b 17 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 df fd ff ff 4c 89 ef e8 ff 0d 6c [ 119.392315][ T6143] RSP: 0000:ffffc9000d7bf8c0 EFLAGS: 00010283 [ 119.398451][ T6143] RAX: 000000000001e268 RBX: ffff88807882f8b8 RCX: ffffc90003b41000 [ 119.406649][ T6143] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffff91261ca0 [ 119.415555][ T6143] RBP: 0000000000000000 R08: ffff888035b7c900 R09: 0000000000000000 [ 119.424135][ T6143] R10: 0000000000000001 R11: ffffffff827ab0a4 R12: 0000000000000000 [ 119.432147][ T6143] R13: ffff88807882f810 R14: 0000000000000000 R15: 0000000000000162 [ 119.440164][ T6143] FS: 00007f5a26e9f6c0(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 119.449154][ T6143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.455795][ T6143] CR2: 00007f718e9dc2fe CR3: 000000007c992000 CR4: 00000000003526f0 [ 119.463798][ T6143] Call Trace: [ 119.467073][ T6143] [ 119.469988][ T6143] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 119.475788][ T6143] cpuhp_invoke_callback+0x205/0x9a0 [ 119.481080][ T6143] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 119.486861][ T6143] cpuhp_issue_call+0x1b8/0x970 [ 119.491788][ T6143] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 119.498511][ T6143] __cpuhp_state_add_instance+0xd7/0x2d0 [ 119.504273][ T6143] alloc_buffer+0x76c/0x1800 [ 119.508915][ T6143] __ring_buffer_alloc+0x2d/0x40 [ 119.514531][ T6143] allocate_trace_buffer+0x150/0xa30 [ 119.519835][ T6143] ? __kasan_kmalloc+0x30/0xb0 [ 119.525149][ T6143] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 119.530988][ T6143] ? lockdep_init_map_type+0x5c/0x250 [ 119.536429][ T6143] trace_array_create_systems+0x582/0xc30 [ 119.542260][ T6143] instance_mkdir+0xca/0x140 [ 119.546859][ T6143] tracefs_syscall_mkdir+0x10e/0x180 [ 119.552214][ T6143] ? __pfx_may_create+0x10/0x10 [ 119.557097][ T6143] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 119.562973][ T6143] ? inode_permission+0x374/0x620 [ 119.568017][ T6143] vfs_mkdir+0x361/0x850 [ 119.572302][ T6143] filename_mkdirat+0x48b/0x5e0 [ 119.577137][ T6143] ? __pfx_filename_mkdirat+0x10/0x10 [ 119.582503][ T6143] ? strncpy_from_user+0x19d/0x2d0 [ 119.587596][ T6143] ? do_getname+0x191/0x390 [ 119.592109][ T6143] __x64_sys_mkdirat+0x89/0xc0 [ 119.596859][ T6143] do_syscall_64+0x115/0x870 [ 119.601466][ T6143] ? clear_bhb_loop+0x40/0x90 [ 119.606149][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.612064][ T6143] RIP: 0033:0x7f5a25f9e0d9 [ 119.616862][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.636906][ T6143] RSP: 002b:00007f5a26e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 119.645431][ T6143] RAX: ffffffffffffffda RBX: 00007f5a26225fa0 RCX: 00007f5a25f9e0d9 [ 119.653411][ T6143] RDX: 00000000000001ff RSI: 0000200000000600 RDI: ffffffffffffff9c [ 119.661358][ T6143] RBP: 00007f5a26035024 R08: 0000000000000000 R09: 0000000000000000 [ 119.669323][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.677282][ T6143] R13: 00007f5a26226038 R14: 00007f5a26225fa0 R15: 00007ffe3c1f0628 [ 119.685254][ T6143] [ 119.688258][ T6143] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.695522][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 119.704622][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.714663][ T6143] Call Trace: [ 119.717925][ T6143] [ 119.720844][ T6143] dump_stack_lvl+0x100/0x190 [ 119.725519][ T6143] vpanic+0x552/0x970 [ 119.729486][ T6143] ? __pfx_vpanic+0x10/0x10 [ 119.733980][ T6143] panic+0xd1/0xe0 [ 119.737684][ T6143] ? __pfx_panic+0x10/0x10 [ 119.742100][ T6143] check_panic_on_warn.cold+0x19/0x34 [ 119.747459][ T6143] ? trace_rb_cpu_prepare+0x458/0x500 [ 119.752822][ T6143] __warn.cold+0x191/0x318 [ 119.757227][ T6143] __report_bug+0x30f/0x440 [ 119.761717][ T6143] ? trace_rb_cpu_prepare+0x458/0x500 [ 119.767078][ T6143] ? __pfx___report_bug+0x10/0x10 [ 119.772086][ T6143] ? rb_allocate_cpu_buffer+0x856/0x28d0 [ 119.777715][ T6143] ? rb_allocate_cpu_buffer+0x85d/0x28d0 [ 119.783340][ T6143] report_bug_entry+0xe1/0x290 [ 119.788094][ T6143] ? trace_rb_cpu_prepare+0x45a/0x500 [ 119.793457][ T6143] handle_bug+0x1cd/0x2a0 [ 119.797776][ T6143] exc_invalid_op+0x17/0x50 [ 119.802268][ T6143] asm_exc_invalid_op+0x1a/0x20 [ 119.807105][ T6143] RIP: 0010:trace_rb_cpu_prepare+0x45a/0x500 [ 119.813076][ T6143] Code: 48 c1 ea 03 80 3c 02 00 0f 84 c7 fc ff ff 48 8b 3c 24 e8 29 0e 6c 00 e9 b9 fc ff ff e8 ff 83 fb ff 48 8d 3d b8 4b 17 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 df fd ff ff 4c 89 ef e8 ff 0d 6c [ 119.832671][ T6143] RSP: 0000:ffffc9000d7bf8c0 EFLAGS: 00010283 [ 119.838740][ T6143] RAX: 000000000001e268 RBX: ffff88807882f8b8 RCX: ffffc90003b41000 [ 119.846694][ T6143] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffff91261ca0 [ 119.854652][ T6143] RBP: 0000000000000000 R08: ffff888035b7c900 R09: 0000000000000000 [ 119.862607][ T6143] R10: 0000000000000001 R11: ffffffff827ab0a4 R12: 0000000000000000 [ 119.870558][ T6143] R13: ffff88807882f810 R14: 0000000000000000 R15: 0000000000000162 [ 119.878515][ T6143] ? kasan_save_track+0x14/0x30 [ 119.883373][ T6143] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 119.889083][ T6143] cpuhp_invoke_callback+0x205/0x9a0 [ 119.894360][ T6143] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 119.900071][ T6143] cpuhp_issue_call+0x1b8/0x970 [ 119.904917][ T6143] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 119.911592][ T6143] __cpuhp_state_add_instance+0xd7/0x2d0 [ 119.917222][ T6143] alloc_buffer+0x76c/0x1800 [ 119.921814][ T6143] __ring_buffer_alloc+0x2d/0x40 [ 119.926741][ T6143] allocate_trace_buffer+0x150/0xa30 [ 119.932014][ T6143] ? __kasan_kmalloc+0x30/0xb0 [ 119.936767][ T6143] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 119.942561][ T6143] ? lockdep_init_map_type+0x5c/0x250 [ 119.947929][ T6143] trace_array_create_systems+0x582/0xc30 [ 119.953638][ T6143] instance_mkdir+0xca/0x140 [ 119.958214][ T6143] tracefs_syscall_mkdir+0x10e/0x180 [ 119.963491][ T6143] ? __pfx_may_create+0x10/0x10 [ 119.968334][ T6143] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 119.974138][ T6143] ? inode_permission+0x374/0x620 [ 119.979163][ T6143] vfs_mkdir+0x361/0x850 [ 119.983404][ T6143] filename_mkdirat+0x48b/0x5e0 [ 119.988245][ T6143] ? __pfx_filename_mkdirat+0x10/0x10 [ 119.993601][ T6143] ? strncpy_from_user+0x19d/0x2d0 [ 119.998703][ T6143] ? do_getname+0x191/0x390 [ 120.003207][ T6143] __x64_sys_mkdirat+0x89/0xc0 [ 120.007971][ T6143] do_syscall_64+0x115/0x870 [ 120.012556][ T6143] ? clear_bhb_loop+0x40/0x90 [ 120.017229][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.023117][ T6143] RIP: 0033:0x7f5a25f9e0d9 [ 120.027527][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.047128][ T6143] RSP: 002b:00007f5a26e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 120.055535][ T6143] RAX: ffffffffffffffda RBX: 00007f5a26225fa0 RCX: 00007f5a25f9e0d9 [ 120.063493][ T6143] RDX: 00000000000001ff RSI: 0000200000000600 RDI: ffffffffffffff9c [ 120.071448][ T6143] RBP: 00007f5a26035024 R08: 0000000000000000 R09: 0000000000000000 [ 120.079413][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.087378][ T6143] R13: 00007f5a26226038 R14: 00007f5a26225fa0 R15: 00007ffe3c1f0628 [ 120.095356][ T6143] [ 120.098602][ T6143] Kernel Offset: disabled [ 120.102906][ T6143] Rebooting in 86400 seconds..