last executing test programs: 10.261030179s ago: executing program 0 (id=1): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 9.472809849s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000002c0)) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x10) membarrier(0x40, 0x0) membarrier(0x20, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r5) mount$9p_xen(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2000007e, &(0x7f0000001300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='afs_make_fs_calli\x00', r6}, 0x10) 8.280315536s ago: executing program 4 (id=5): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0xc1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.705435071s ago: executing program 2 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20803}}, 0x20}, 0x1, 0xf303000000000000}, 0x0) 7.610254972s ago: executing program 1 (id=2): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 7.362468135s ago: executing program 4 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x14, "008400000000e291f8ed569e000900"}) r1 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x3, 0x5001) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) r3 = syz_open_pts(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x5) socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000140)={{0x3, @default, 0x4}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r5, r6) r7 = openat$vmci(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r8, 0x8924, 0x20001114) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f00000010c0)={0x0, 0x0, 0xfffffffffffffca9}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000003c0)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) 7.214551692s ago: executing program 2 (id=8): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x7d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip6tnl0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x69) close(r3) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000003c0)='./file2\x00') execve(0x0, 0x0, 0x0) execve(&(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000340)) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000"], 0x15) r5 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000011dea13200faffffffffffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100), 0x6) ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000000)) 6.858669512s ago: executing program 3 (id=4): r0 = getpid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x103, 0x0, 0x0, 0x8}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x1, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev={0xac, 0x14, 0x14, 0x8}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x33}, 0xa, @in=@dev, 0x0, 0x0, 0x0, 0x10}}, 0xe8) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe880000000000000000000000000001c910fe29bb0cc300000000000000000000000720000000000600"/96], 0x60}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 5.978160459s ago: executing program 0 (id=9): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000044, &(0x7f00000018c0), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file2\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000340)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="4e1d9f5e1effeaefea51f1953de122f042633e45a878a56ee7da1669297a29cd0f0b41cd65c29c484f756e4e1573f25237f0affdd542dc2960e1863e0c287cd7846885aa3c67fa7d118004a100cd2fffd58093a797f6cad9244f466486f8bba2fc9f2340f443", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7ff}, @in={0x2, 0x4e21, @remote}]}, &(0x7f00000002c0)=0x4c) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup2(r4, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000006c0)={0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) 5.326470927s ago: executing program 1 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 4.534472834s ago: executing program 1 (id=11): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) 4.534093672s ago: executing program 2 (id=12): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="09000700d01649d4d100000030005080110001004abee339084eeef16f162471f4000000080007000000000005000200020000000800030001ac0f"], 0x58}}, 0x0) 3.891210796s ago: executing program 2 (id=13): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ddff0000000000018000"/27], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.019980236s ago: executing program 4 (id=14): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 2.206282065s ago: executing program 3 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r1, 0x135, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0xfc}, {}, {}, {0x0, 0x4}, {}], "040ded930dde6d5a"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48005}, 0x0) 1.854302632s ago: executing program 4 (id=16): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x4b5, 0x0, &(0x7f0000000240), &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000001100)=ANY=[], 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, r3, 0x0}]) recvmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000380), 0x6e, &(0x7f0000000400)}, 0x40010002) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0xfdfd, {0x0, 0x0, 0xffffffff, 0xfffffff9}}) fchdir(0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r8 = getpid() process_vm_readv(r8, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) 1.8536813s ago: executing program 3 (id=17): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x11, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1c1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r4}, 0x10) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xa25, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.260765552s ago: executing program 0 (id=18): syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x0, 0x0}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@loopback}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 606.118039ms ago: executing program 1 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x9]}, 0x8) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8004, 0x2, 0x84}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000180)={0x3, r7}) r8 = socket$packet(0x11, 0x3, 0x300) dup(r0) fcntl$dupfd(r1, 0x0, r8) 421.528408ms ago: executing program 0 (id=20): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x3, &(0x7f00000015c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5524, r0, 0x0, 0x0, 0x6, 0x0, 0x0, r2}, 0x0]) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=21): write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="428a85a6866dc3e0f7580375302ad6e99b73d2e7ae268f66ad8101cebf08ccc82bf6c4ee75dedd8aebb34590d28aa22ca14cd4b1ca2a4adeedf8c8eaa3aa87129427a56ff4e2de2ff411a6ffe7832774961c4d6538717dcfefe6eb4adada141f1437a2b2c3a482f7dd48d55617bf32c3d2932b099d3a11d3966f43b62f8fcf913b9df2dda96f17cce39ce328f5049707664b2413df6f7f65e883e7398b7c713247ada6cddb501d", @ANYRES32, @ANYRESDEC, @ANYBLOB="015626611ece99fafabbd204a687eef8dc34a27f3e4cc3879c305d948895aec333cc624a63a2f72a329e3922961521830ce1da1cf5148dbfb367ba86098ca365ca831716f19d5328d4b48b12a163196444a18cbe0684e1661bdf3654ad4f445ef1c32a2755a1"], 0x99) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0x7, 0x2, 0xa, 0x3, @time={0x10, 0xfffffff9}, {0x2, 0x2}, {0xff, 0x1c}, @raw8={"ed6984ce168a0b678396b018"}}, {0x9, 0x4f, 0x7, 0x7, @time={0x5, 0x9b}, {0x6, 0x1}, {0x79, 0x8}, @control={0x9, 0x8, 0x3}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0xe, 0x1}, 0xdc}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x8c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 97.686011][ T46] cfg80211: failed to load regulatory.db [ 101.801312][ T29] audit: type=1400 audit(1726893637.141:88): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 101.814036][ T5212] cgroup: Unknown subsys name 'net' [ 101.824525][ T29] audit: type=1400 audit(1726893637.151:89): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.852008][ T29] audit: type=1400 audit(1726893637.181:90): avc: denied { unmount } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.040062][ T5212] cgroup: Unknown subsys name 'rlimit' [ 102.211472][ T29] audit: type=1400 audit(1726893637.551:91): avc: denied { setattr } for pid=5212 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.235485][ T29] audit: type=1400 audit(1726893637.561:92): avc: denied { create } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.273866][ T29] audit: type=1400 audit(1726893637.561:93): avc: denied { write } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.295054][ T29] audit: type=1400 audit(1726893637.561:94): avc: denied { read } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.317470][ T29] audit: type=1400 audit(1726893637.591:95): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.344663][ T29] audit: type=1400 audit(1726893637.601:96): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.368107][ T29] audit: type=1400 audit(1726893637.601:97): avc: denied { read } for pid=4887 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 102.431727][ T5218] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 104.318542][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.610788][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 107.610812][ T29] audit: type=1400 audit(1726893642.941:102): avc: denied { execmem } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.862722][ T29] audit: type=1400 audit(1726893644.191:103): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 108.919321][ T29] audit: type=1400 audit(1726893644.191:104): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.943834][ T29] audit: type=1400 audit(1726893644.201:105): avc: denied { create } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.978566][ T29] audit: type=1400 audit(1726893644.201:106): avc: denied { read write } for pid=5225 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.003696][ T29] audit: type=1400 audit(1726893644.201:107): avc: denied { open } for pid=5225 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.028040][ T29] audit: type=1400 audit(1726893644.211:108): avc: denied { create } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.050505][ T29] audit: type=1400 audit(1726893644.251:109): avc: denied { ioctl } for pid=5225 comm="syz-executor" path="socket:[3461]" dev="sockfs" ino=3461 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.143040][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.159831][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.163353][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.168648][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.175394][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.185761][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.189792][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.204571][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.205820][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.214866][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.219828][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.226183][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.240128][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.244439][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.247948][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.256517][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.269521][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.282146][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.289405][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.293515][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.305511][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.313169][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.314804][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.333542][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.349061][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.384104][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.393545][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.401350][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.420553][ T29] audit: type=1400 audit(1726893644.721:110): avc: denied { read } for pid=5226 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.424515][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.450785][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.506537][ T29] audit: type=1400 audit(1726893644.791:111): avc: denied { open } for pid=5229 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.570338][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 110.686965][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 110.705296][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 110.720098][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 110.817138][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 111.061295][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.069495][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.077844][ T5227] bridge_slave_0: entered allmulticast mode [ 111.086986][ T5227] bridge_slave_0: entered promiscuous mode [ 111.168490][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.176471][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.184165][ T5227] bridge_slave_1: entered allmulticast mode [ 111.192269][ T5227] bridge_slave_1: entered promiscuous mode [ 111.341210][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.348902][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.356754][ T5228] bridge_slave_0: entered allmulticast mode [ 111.365509][ T5228] bridge_slave_0: entered promiscuous mode [ 111.375874][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.383217][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.390484][ T5228] bridge_slave_1: entered allmulticast mode [ 111.398758][ T5228] bridge_slave_1: entered promiscuous mode [ 111.406954][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.417246][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.425027][ T5226] bridge_slave_0: entered allmulticast mode [ 111.433000][ T5226] bridge_slave_0: entered promiscuous mode [ 111.443855][ T5238] Bluetooth: hci1: command tx timeout [ 111.450005][ T5238] Bluetooth: hci4: command tx timeout [ 111.451452][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.463270][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.470595][ T5226] bridge_slave_1: entered allmulticast mode [ 111.478702][ T5226] bridge_slave_1: entered promiscuous mode [ 111.491736][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.506653][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.516119][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.523192][ T5233] Bluetooth: hci3: command tx timeout [ 111.523710][ T5233] Bluetooth: hci0: command tx timeout [ 111.524312][ T5238] Bluetooth: hci2: command tx timeout [ 111.538311][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.548970][ T5225] bridge_slave_0: entered allmulticast mode [ 111.557619][ T5225] bridge_slave_0: entered promiscuous mode [ 111.669281][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.676812][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.685086][ T5225] bridge_slave_1: entered allmulticast mode [ 111.693220][ T5225] bridge_slave_1: entered promiscuous mode [ 111.719584][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.727151][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.734631][ T5229] bridge_slave_0: entered allmulticast mode [ 111.742378][ T5229] bridge_slave_0: entered promiscuous mode [ 111.752087][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.759790][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.768531][ T5229] bridge_slave_1: entered allmulticast mode [ 111.777596][ T5229] bridge_slave_1: entered promiscuous mode [ 111.831161][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.906276][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.923259][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.939970][ T5227] team0: Port device team_slave_0 added [ 111.951427][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.990898][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.004519][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.037367][ T5227] team0: Port device team_slave_1 added [ 112.069293][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.104107][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.243138][ T5228] team0: Port device team_slave_0 added [ 112.255918][ T5226] team0: Port device team_slave_0 added [ 112.264875][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.271912][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.299068][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.318584][ T5225] team0: Port device team_slave_0 added [ 112.372373][ T5229] team0: Port device team_slave_0 added [ 112.382434][ T5228] team0: Port device team_slave_1 added [ 112.397210][ T5226] team0: Port device team_slave_1 added [ 112.405481][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.412471][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.439451][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.455153][ T5225] team0: Port device team_slave_1 added [ 112.464671][ T5229] team0: Port device team_slave_1 added [ 112.626269][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.633948][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.660679][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.695229][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.702240][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.730140][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.743479][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.750483][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.778423][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.791160][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.798676][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.825975][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.871978][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.879101][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.905712][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.918129][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.926641][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.953560][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.976110][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.983851][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.010320][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.058472][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.066093][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.092839][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.188869][ T5227] hsr_slave_0: entered promiscuous mode [ 113.199003][ T5227] hsr_slave_1: entered promiscuous mode [ 113.302145][ T5228] hsr_slave_0: entered promiscuous mode [ 113.310493][ T5228] hsr_slave_1: entered promiscuous mode [ 113.318800][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.327641][ T5228] Cannot create hsr debugfs directory [ 113.361186][ T5229] hsr_slave_0: entered promiscuous mode [ 113.368886][ T5229] hsr_slave_1: entered promiscuous mode [ 113.376281][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.383982][ T5229] Cannot create hsr debugfs directory [ 113.397827][ T5226] hsr_slave_0: entered promiscuous mode [ 113.405423][ T5226] hsr_slave_1: entered promiscuous mode [ 113.412132][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.420043][ T5226] Cannot create hsr debugfs directory [ 113.458426][ T5225] hsr_slave_0: entered promiscuous mode [ 113.466415][ T5225] hsr_slave_1: entered promiscuous mode [ 113.473525][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.481143][ T5225] Cannot create hsr debugfs directory [ 113.523625][ T5238] Bluetooth: hci4: command tx timeout [ 113.523638][ T5242] Bluetooth: hci1: command tx timeout [ 113.602888][ T5242] Bluetooth: hci2: command tx timeout [ 113.602913][ T5238] Bluetooth: hci0: command tx timeout [ 113.602966][ T5238] Bluetooth: hci3: command tx timeout [ 114.500949][ T5227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.528991][ T5227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.544075][ T5227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.558919][ T5227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.696610][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.739591][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.756039][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.790895][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.907541][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.929941][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.945525][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.960900][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.206090][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.229153][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.247954][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.261336][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.282151][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.451858][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.505116][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.512922][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.538646][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.603913][ T5238] Bluetooth: hci1: command tx timeout [ 115.609493][ T5238] Bluetooth: hci4: command tx timeout [ 115.637269][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.660371][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.683333][ T5238] Bluetooth: hci3: command tx timeout [ 115.688923][ T5233] Bluetooth: hci2: command tx timeout [ 115.688932][ T5242] Bluetooth: hci0: command tx timeout [ 115.711363][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.718666][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.731498][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.738745][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.753626][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.760830][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.786475][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.806779][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.820775][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.961887][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.140592][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.184700][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.191951][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.298618][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.305955][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.324575][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 116.324598][ T29] audit: type=1400 audit(1726893651.671:115): avc: denied { sys_module } for pid=5226 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.504416][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.567246][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.809806][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.856505][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.919879][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.927267][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.945430][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.952802][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.017014][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.024451][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.047451][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.054878][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.128974][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.150458][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.302352][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.541530][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.669034][ T5226] veth0_vlan: entered promiscuous mode [ 117.685136][ T5233] Bluetooth: hci4: command tx timeout [ 117.690748][ T5233] Bluetooth: hci1: command tx timeout [ 117.763874][ T5233] Bluetooth: hci0: command tx timeout [ 117.769655][ T5233] Bluetooth: hci2: command tx timeout [ 117.778529][ T5238] Bluetooth: hci3: command tx timeout [ 117.789099][ T5226] veth1_vlan: entered promiscuous mode [ 118.060345][ T5226] veth0_macvtap: entered promiscuous mode [ 118.099609][ T5229] veth0_vlan: entered promiscuous mode [ 118.119290][ T5226] veth1_macvtap: entered promiscuous mode [ 118.162045][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.207870][ T5229] veth1_vlan: entered promiscuous mode [ 118.280185][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.377496][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.392348][ T5227] veth0_vlan: entered promiscuous mode [ 118.408650][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.478238][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.494317][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.505055][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.514168][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.539620][ T5228] veth0_vlan: entered promiscuous mode [ 118.552017][ T5227] veth1_vlan: entered promiscuous mode [ 118.588522][ T5229] veth0_macvtap: entered promiscuous mode [ 118.607056][ T5229] veth1_macvtap: entered promiscuous mode [ 118.689561][ T5228] veth1_vlan: entered promiscuous mode [ 118.766983][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.778171][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.796160][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.859752][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.871976][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.891199][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.974896][ T5227] veth0_macvtap: entered promiscuous mode [ 118.987459][ T5225] veth0_vlan: entered promiscuous mode [ 119.032237][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.050610][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.064325][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.073355][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.101082][ T5227] veth1_macvtap: entered promiscuous mode [ 119.117701][ T5225] veth1_vlan: entered promiscuous mode [ 119.145574][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.170231][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.254261][ T5228] veth0_macvtap: entered promiscuous mode [ 119.292475][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.304427][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.315215][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.327843][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.345190][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.375161][ T5228] veth1_macvtap: entered promiscuous mode [ 119.395284][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.406436][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.416772][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.427623][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.440394][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.453718][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.461633][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.521637][ T5227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.538022][ T5227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.556778][ T5227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.565930][ T5227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.591602][ T29] audit: type=1400 audit(1726893654.931:116): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/root/syzkaller.S8CQjK/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 119.660468][ T29] audit: type=1400 audit(1726893654.971:117): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.705282][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.712880][ T29] audit: type=1400 audit(1726893654.971:118): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/root/syzkaller.S8CQjK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.726600][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.756989][ T29] audit: type=1400 audit(1726893654.981:119): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.761204][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.782258][ T29] audit: type=1400 audit(1726893654.991:120): avc: denied { unmount } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.811062][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.821568][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.822748][ T29] audit: type=1400 audit(1726893655.041:121): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 119.832446][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.859150][ T29] audit: type=1400 audit(1726893655.051:122): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.879536][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.008773][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.030396][ T29] audit: type=1400 audit(1726893655.341:123): avc: denied { read write } for pid=5226 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.036405][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.073451][ T29] audit: type=1400 audit(1726893655.341:124): avc: denied { open } for pid=5226 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.129312][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.157749][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.170047][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.185332][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.195913][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.207248][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.222372][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.232085][ T5225] veth0_macvtap: entered promiscuous mode [ 120.307065][ T5225] veth1_macvtap: entered promiscuous mode [ 120.347842][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.358741][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.368329][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.377344][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.395863][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.410842][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.481240][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.492348][ T5213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.501859][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.564700][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.578024][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.588382][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.599362][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.610658][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.621372][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.631346][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.642259][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.657009][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.724358][ T5213] usb 1-1: Using ep0 maxpacket: 32 [ 120.747783][ T5213] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 120.754507][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.763503][ T5213] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 120.792665][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.812717][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.823222][ T5213] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 120.832408][ T5213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.832672][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.853160][ T5213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.872708][ T5213] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 120.879593][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.907727][ T5213] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 120.915303][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.933400][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.936421][ T5213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.950948][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.969112][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.971689][ T5213] usb 1-1: config 0 descriptor?? [ 121.002118][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.022034][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.034365][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.050371][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.139046][ T5316] No control pipe specified [ 121.224211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.232110][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.367792][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 121.367814][ T29] audit: type=1400 audit(1726893656.711:134): avc: denied { ioctl } for pid=5314 comm="syz.2.3" path="socket:[6040]" dev="sockfs" ino=6040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.412092][ T5213] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 121.553811][ T5213] usb 1-1: USB disconnect, device number 2 [ 121.641750][ T5213] usblp0: removed [ 121.658972][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.689879][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.998411][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.041334][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.084239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.180291][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.200528][ T29] audit: type=1400 audit(1726893657.541:135): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.yRAjtM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.215791][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.272473][ T29] audit: type=1400 audit(1726893657.591:136): avc: denied { name_bind } for pid=5318 comm="syz.4.5" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 122.303628][ T5213] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.370718][ T29] audit: type=1400 audit(1726893657.591:137): avc: denied { node_bind } for pid=5318 comm="syz.4.5" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 122.544338][ T5213] usb 1-1: Using ep0 maxpacket: 32 [ 122.569233][ T5213] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.579841][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.610717][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.612470][ T5213] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.671965][ T5213] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.735991][ T5213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.784936][ T5213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.837410][ T5213] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.914779][ T5213] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.948726][ T5213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.308485][ T29] audit: type=1400 audit(1726893658.621:138): avc: denied { create } for pid=5326 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.359341][ T5213] usb 1-1: config 0 descriptor?? [ 123.422784][ T5213] usb 1-1: can't set config #0, error -71 [ 123.668707][ T29] audit: type=1400 audit(1726893658.921:139): avc: denied { write } for pid=5323 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.303068][ T29] audit: type=1400 audit(1726893659.581:140): avc: denied { map_create } for pid=5328 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.314804][ T5213] usb 1-1: USB disconnect, device number 3 [ 124.432428][ T29] audit: type=1400 audit(1726893659.581:141): avc: denied { map_read map_write } for pid=5328 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.546267][ T29] audit: type=1400 audit(1726893659.831:142): avc: denied { create } for pid=5326 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.645209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.693358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.705685][ T29] audit: type=1400 audit(1726893659.931:143): avc: denied { bind } for pid=5326 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.317340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.332255][ T5344] process 'syz.0.9' launched './file0' with NULL argv: empty string added [ 125.364654][ T5336] mkiss: ax0: crc mode is auto. [ 125.982727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 127.043629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 127.777411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.185474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.564771][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 128.564796][ T29] audit: type=1400 audit(1726893663.911:192): avc: denied { create } for pid=5371 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.593268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 128.868227][ T5375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 129.116457][ T29] audit: type=1400 audit(1726893664.461:193): avc: denied { read write } for pid=5373 comm="syz.4.16" name="video36" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 129.235545][ T29] audit: type=1400 audit(1726893664.461:194): avc: denied { open } for pid=5373 comm="syz.4.16" path="/dev/video36" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 129.261799][ T5381] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 129.429743][ T29] audit: type=1400 audit(1726893664.481:195): avc: denied { ioctl } for pid=5373 comm="syz.4.16" path="/dev/video36" dev="devtmpfs" ino=961 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 129.579202][ T29] audit: type=1400 audit(1726893664.491:196): avc: denied { setopt } for pid=5373 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.663229][ T29] audit: type=1400 audit(1726893664.671:197): avc: denied { create } for pid=5379 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.722822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 129.853665][ T29] audit: type=1400 audit(1726893664.671:198): avc: denied { read } for pid=5379 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.989950][ T29] audit: type=1400 audit(1726893664.731:199): avc: denied { write } for pid=5379 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.372557][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 235.379782][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5374/1:b..l P5388/1:b..l [ 235.389309][ C1] rcu: (detected by 1, t=10502 jiffies, g=12477, q=887 ncpus=2) [ 235.397156][ C1] task:syz.0.20 state:R running task stack:27856 pid:5388 tgid:5387 ppid:5226 flags:0x00004000 [ 235.410038][ C1] Call Trace: [ 235.413363][ C1] [ 235.416347][ C1] __schedule+0xe37/0x5490 [ 235.420870][ C1] ? hlock_class+0x4e/0x130 [ 235.425449][ C1] ? __pfx___schedule+0x10/0x10 [ 235.430374][ C1] ? find_held_lock+0x2d/0x110 [ 235.435215][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 235.440735][ C1] preempt_schedule_common+0x44/0xc0 [ 235.446090][ C1] preempt_schedule_thunk+0x1a/0x30 [ 235.451358][ C1] _raw_spin_unlock+0x3e/0x50 [ 235.456111][ C1] unmap_page_range+0xbb8/0x3d30 [ 235.461151][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 235.466599][ C1] ? uprobe_munmap+0x20/0x5c0 [ 235.471340][ C1] unmap_single_vma+0x194/0x2b0 [ 235.476269][ C1] unmap_vmas+0x22f/0x490 [ 235.480674][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 235.485700][ C1] ? __pfx_lock_release+0x10/0x10 [ 235.490802][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 235.495980][ C1] exit_mmap+0x1b8/0xb20 [ 235.500285][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 235.505139][ C1] __mmput+0x12a/0x480 [ 235.509266][ C1] mmput+0x62/0x70 [ 235.513043][ C1] do_exit+0x9bf/0x2bb0 [ 235.517297][ C1] ? get_signal+0x8f2/0x2770 [ 235.521944][ C1] ? __pfx_do_exit+0x10/0x10 [ 235.526593][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 235.531669][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.537109][ C1] do_group_exit+0xd3/0x2a0 [ 235.541682][ C1] get_signal+0x25fb/0x2770 [ 235.546368][ C1] ? __pfx_get_signal+0x10/0x10 [ 235.551312][ C1] ? __pfx_do_futex+0x10/0x10 [ 235.556059][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 235.561668][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 235.567914][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 235.573633][ C1] do_syscall_64+0xda/0x250 [ 235.578195][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.584157][ C1] RIP: 0033:0x7efe4c37def9 [ 235.588623][ C1] RSP: 002b:00007efe4d1a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.597114][ C1] RAX: fffffffffffffe00 RBX: 00007efe4c535f88 RCX: 00007efe4c37def9 [ 235.605231][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe4c535f88 [ 235.613457][ C1] RBP: 00007efe4c535f80 R08: 0000000000000000 R09: 0000000000000000 [ 235.621832][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efe4c535f8c [ 235.630023][ C1] R13: 0000000000000000 R14: 00007ffec62a8b60 R15: 00007ffec62a8c48 [ 235.638068][ C1] [ 235.641137][ C1] task:syz.4.16 state:R running task stack:25296 pid:5374 tgid:5373 ppid:5227 flags:0x00004006 [ 235.652936][ C1] Call Trace: [ 235.656355][ C1] [ 235.659334][ C1] __schedule+0xe37/0x5490 [ 235.663854][ C1] ? __pfx___schedule+0x10/0x10 [ 235.668786][ C1] ? mark_held_locks+0x9f/0xe0 [ 235.673798][ C1] preempt_schedule_irq+0x51/0x90 [ 235.678896][ C1] irqentry_exit+0x36/0x90 [ 235.683499][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.689552][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 235.695782][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 d4 ff 77 7e 65 8b 05 d5 ff 77 7e a9 00 01 ff 00 <48> 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 [ 235.715798][ C1] RSP: 0018:ffffc900040c7788 EFLAGS: 00000246 [ 235.721920][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff81d222ae [ 235.730026][ C1] RDX: ffff88802fdc1e00 RSI: 0000000000000000 RDI: 0000000000000005 [ 235.738052][ C1] RBP: ffff88802fdc1e00 R08: 0000000000000005 R09: 0000000000000000 [ 235.746080][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000017 [ 235.754095][ C1] R13: 0000000000000000 R14: ffff88802ed0bea8 R15: ffff88802ed0be98 [ 235.762220][ C1] ? count_memcg_event_mm.part.0+0x8e/0x340 [ 235.768198][ C1] count_memcg_event_mm.part.0+0x241/0x340 [ 235.774077][ C1] handle_mm_fault+0x1be/0xa60 [ 235.778901][ C1] ? __pkru_allows_pkey+0x21/0xb0 [ 235.783997][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 235.789189][ C1] exc_page_fault+0x5c/0xc0 [ 235.793760][ C1] asm_exc_page_fault+0x26/0x30 [ 235.798677][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 235.804546][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 235.824485][ C1] RSP: 0018:ffffc900040c7958 EFLAGS: 00050206 [ 235.830609][ C1] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 235.838629][ C1] RDX: 0000000000000000 RSI: ffff88801330e180 RDI: 00000000204dd000 [ 235.846649][ C1] RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed1002661dff [ 235.854751][ C1] R10: ffff88801330efff R11: 0000000000000000 R12: 00000000004dcb80 [ 235.862768][ C1] R13: ffffc900040c7d50 R14: ffff88801330e000 R15: 00000000204dce80 [ 235.870817][ C1] _copy_to_iter+0x4ce/0x1550 [ 235.875611][ C1] ? __pfx__copy_to_iter+0x10/0x10 [ 235.880803][ C1] ? __up_read+0x1fb/0x760 [ 235.885270][ C1] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 235.891152][ C1] ? down_read+0xc9/0x330 [ 235.895632][ C1] ? __pfx___up_read+0x10/0x10 [ 235.900478][ C1] copy_page_to_iter+0xf1/0x180 [ 235.905408][ C1] process_vm_rw_core.constprop.0+0x5c9/0x9f0 [ 235.911582][ C1] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 235.918268][ C1] ? copy_iovec_from_user+0x77/0x170 [ 235.923659][ C1] process_vm_rw+0x301/0x360 [ 235.928558][ C1] ? __pfx_process_vm_rw+0x10/0x10 [ 235.933930][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 235.939419][ C1] ? xfd_validate_state+0x5d/0x180 [ 235.944729][ C1] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 235.950445][ C1] ? do_syscall_64+0x91/0x250 [ 235.955198][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.960486][ C1] do_syscall_64+0xcd/0x250 [ 235.965225][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.971199][ C1] RIP: 0033:0x7f05cd77def9 [ 235.975663][ C1] RSP: 002b:00007f05ce551038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 235.984129][ C1] RAX: ffffffffffffffda RBX: 00007f05cd935f80 RCX: 00007f05cd77def9 [ 235.992152][ C1] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000000e [ 236.000168][ C1] RBP: 00007f05cd7f0b76 R08: 0000000000000286 R09: 0000000000000000 [ 236.008618][ C1] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 236.016644][ C1] R13: 0000000000000000 R14: 00007f05cd935f80 R15: 00007ffdf8fa5ab8 [ 236.025132][ C1] [ 236.028210][ C1] rcu: rcu_preempt kthread starved for 10287 jiffies! g12477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 236.039457][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 236.049463][ C1] rcu: RCU grace-period kthread stack dump: [ 236.055385][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 236.067284][ C1] Call Trace: [ 236.070596][ C1] [ 236.074005][ C1] __schedule+0xe37/0x5490 [ 236.078499][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 236.083785][ C1] ? __pfx___schedule+0x10/0x10 [ 236.088709][ C1] ? schedule+0x298/0x350 [ 236.093105][ C1] ? __pfx_lock_release+0x10/0x10 [ 236.098195][ C1] ? __pfx___mod_timer+0x10/0x10 [ 236.103203][ C1] ? lock_acquire+0x1b1/0x560 [ 236.107945][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 236.113487][ C1] schedule+0xe7/0x350 [ 236.117638][ C1] schedule_timeout+0x136/0x2a0 [ 236.122590][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 236.128061][ C1] ? __pfx_process_timeout+0x10/0x10 [ 236.133422][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 236.139327][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 236.144898][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 236.150255][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 236.155608][ C1] ? rcu_gp_init+0xc82/0x1630 [ 236.160349][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 236.165629][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 236.171553][ C1] rcu_gp_kthread+0x271/0x380 [ 236.176315][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 236.181612][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.186888][ C1] ? __kthread_parkme+0x148/0x220 [ 236.191975][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 236.197415][ C1] kthread+0x2c1/0x3a0 [ 236.201554][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.206816][ C1] ? __pfx_kthread+0x10/0x10 [ 236.211463][ C1] ret_from_fork+0x45/0x80 [ 236.215948][ C1] ? __pfx_kthread+0x10/0x10 [ 236.220772][ C1] ret_from_fork_asm+0x1a/0x30 [ 236.225625][ C1] [ 236.228677][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 236.235067][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 236.245209][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.255480][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 236.260836][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 78 a2 eb 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 56 a4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.280541][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 236.286667][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b181979 [ 236.294682][ C1] RDX: 0000000000000001 RSI: ffff8880212fa800 RDI: ffff8880212fa864 [ 236.302789][ C1] RBP: ffff8880212fa864 R08: 0000000000000001 R09: ffffed1017126fd9 [ 236.310803][ C1] R10: ffff8880b8937ecb R11: 0000000000000000 R12: ffff8880227c0000 [ 236.318906][ C1] R13: ffffffff8e9faa20 R14: 0000000000000001 R15: 0000000000000000 [ 236.327009][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 236.335996][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.342629][ C1] CR2: 0000561ca8e285f0 CR3: 0000000030d9a000 CR4: 00000000003506f0 [ 236.350822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.358924][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.366941][ C1] Call Trace: [ 236.370258][ C1] [ 236.373141][ C1] ? show_regs+0x8c/0xa0 [ 236.377456][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 236.383843][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 236.389096][ C1] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 236.394730][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 236.400443][ C1] ? tmigr_requires_handle_remote+0x141/0x480 [ 236.406580][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 236.413156][ C1] ? hrtimer_run_queues+0x97/0x450 [ 236.418331][ C1] ? update_process_times+0x175/0x220 [ 236.423763][ C1] ? __pfx_update_process_times+0x10/0x10 [ 236.429539][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 236.435057][ C1] ? update_wall_time+0x1c/0x40 [ 236.440081][ C1] ? tick_nohz_handler+0x376/0x530 [ 236.445252][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 236.450763][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 236.456195][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 236.461970][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 236.468368][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 236.473557][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 236.479764][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 236.485639][ C1] [ 236.488643][ C1] [ 236.491605][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.497837][ C1] ? ct_kernel_exit+0x139/0x190 [ 236.502738][ C1] ? acpi_safe_halt+0x1a/0x20 [ 236.507475][ C1] acpi_idle_enter+0xc5/0x160 [ 236.512209][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 236.517303][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 236.523187][ C1] cpuidle_enter+0x4e/0xa0 [ 236.527748][ C1] do_idle+0x313/0x3f0 [ 236.531882][ C1] ? __pfx_do_idle+0x10/0x10 [ 236.536535][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 236.542497][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.547767][ C1] cpu_startup_entry+0x4f/0x60 [ 236.552595][ C1] start_secondary+0x220/0x2b0 [ 236.557423][ C1] ? __pfx_start_secondary+0x10/0x10 [ 236.562867][ C1] common_startup_64+0x13e/0x148 [ 236.567962][ C1] [ 237.780169][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.787706][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.798762][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.805302][ T1272] ieee802154 phy1 wpan1: encryption failed: -22